diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d0f3ca5e..d52bf606 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -149,7 +149,7 @@ jobs:
       # version as the locally installed typos-cli (1.50.1) so a CI-only
       # dictionary update cannot produce findings that do not reproduce locally.
       - name: Spell check
-        uses: crate-ci/typos@d43b6c087ac471e2ea7b8af622ff15f05c0c365b # v1.50.1
+        uses: crate-ci/typos@00f422f3b19c57bc6338715ebfe3316d38768461 # v1.50.3
 
       # Prebuilt binary, so this job still needs no Rust toolchain. Pinned by
       # SHA — this action downloads and executes a binary, which is the last