diff --git a/.github/workflows/windows-release.yml b/.github/workflows/windows-release.yml
index 55ddbc447..0a85a2cc1 100644
--- a/.github/workflows/windows-release.yml
+++ b/.github/workflows/windows-release.yml
@@ -149,7 +149,7 @@ jobs:
 
     - name: Sign binaries
       if: github.event_name != 'pull_request'
-      uses: azure/trusted-signing-action@v0.3.20
+      uses: azure/trusted-signing-action@v0.4.0
       with:
         endpoint: https://eus.codesigning.azure.net/
         trusted-signing-account-name: ImageMagick
@@ -167,7 +167,7 @@ jobs:
 
     - name: Sign installer
       if: github.event_name != 'pull_request'
-      uses: azure/trusted-signing-action@v0.3.20
+      uses: azure/trusted-signing-action@v0.4.0
       with:
         endpoint: https://eus.codesigning.azure.net/
         trusted-signing-account-name: ImageMagick
@@ -312,7 +312,7 @@ jobs:
 
     - name: Sign executables
       if: github.event_name != 'pull_request'
-      uses: azure/trusted-signing-action@v0.3.20
+      uses: azure/trusted-signing-action@v0.4.0
       with:
         endpoint: https://eus.codesigning.azure.net/
         trusted-signing-account-name: ImageMagick