diff --git a/.github/workflows/dev.yml b/.github/workflows/dev.yml
index 13d7b0533..ab0842673 100644
--- a/.github/workflows/dev.yml
+++ b/.github/workflows/dev.yml
@@ -62,7 +62,7 @@ jobs:
         with:
           version: v3.19.0
 
-      - uses: oras-project/setup-oras@22ce207df3b08e061f537244349aac6ae1d214f6 # v1.2.4
+      - uses: oras-project/setup-oras@5e2f2482b30b0cb3e14e67f89a80c88c659a7c63 # v2.0.3
 
       - name: Package the chart
         id: package