diff --git a/.github/workflows/staging-db-publisher.yaml b/.github/workflows/staging-db-publisher.yaml
index 9f0c7f47..f119c90b 100644
--- a/.github/workflows/staging-db-publisher.yaml
+++ b/.github/workflows/staging-db-publisher.yaml
@@ -69,7 +69,7 @@ jobs:
         # a) booleans come across as string types :(
         # b) if not using workflow_dispatch the default values are empty, which means we want these to effectively evaluate to true (so only check the negative case)
         if: github.event.inputs.run-tmate != 'false'
-        uses: mxschmitt/action-tmate@b3db6e16e597d92037c8647e54acc5d2b1b48dee #v3.18
+        uses: mxschmitt/action-tmate@e5c7151931ca95bad1c6f4190c730ecf8c7dde48 #v3.19
         timeout-minutes: ${{ fromJSON(github.event.inputs.tmate-duration) }}
         with:
           limit-access-to-actor: true