diff --git a/.github/workflows/release-please-reusable.yml b/.github/workflows/release-please-reusable.yml
index 2b659e1..845105e 100644
--- a/.github/workflows/release-please-reusable.yml
+++ b/.github/workflows/release-please-reusable.yml
@@ -164,7 +164,7 @@ jobs:
 
       - name: Run Release Please
         id: release
-        uses: openCoreEMR/release-please-action@v5.0.0-oce.2
+        uses: openCoreEMR/release-please-action@v5.0.0-oce.3
         with:
           config-file: ${{ inputs.config-file }}
           manifest-file: ${{ inputs.manifest-file }}
diff --git a/README.md b/README.md
index 36f8f3b..8cf2173 100644
--- a/README.md
+++ b/README.md
@@ -78,4 +78,4 @@ Secrets:
 
 Callers in the `openCoreEMR` org should use `secrets: inherit`. The reusable workflow reads the org variable `RELEASE_PLEASE_CLIENT_ID` (auto-inherited) and the org secret `RELEASE_PLEASE_PRIVATE_KEY` (forwarded by `inherit`), mints a short-lived App installation token, and uses it for checkout and release-please. PRs opened by the App identity trigger downstream `pull_request` workflows; PRs opened by the default `GITHUB_TOKEN` do not (GitHub anti-recursion).
 
-The pinned action ref (`openCoreEMR/release-please-action@v5.0.0-oce.2`) is hardcoded — GitHub Actions does not allow expressions in `uses:` references, so it can't be a workflow input.
+The pinned action ref (`openCoreEMR/release-please-action@v5.0.0-oce.3`) is hardcoded — GitHub Actions does not allow expressions in `uses:` references, so it can't be a workflow input.