diff --git a/.github/requirements/publish-requirements.txt b/.github/requirements/publish-requirements.txt
index 11761882a025..a46dbe5b74e8 100644
--- a/.github/requirements/publish-requirements.txt
+++ b/.github/requirements/publish-requirements.txt
@@ -520,9 +520,9 @@ six==1.16.0 \
     --hash=sha256:1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926 \
     --hash=sha256:8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254
     # via python-dateutil
-tuf==2.1.0 \
-    --hash=sha256:ab22d1143d4d8aa20c94d243de27eedc8cd517e251ddaf4a88c10952358a13ea \
-    --hash=sha256:dbfe18fbdeba6d76144931db88b76e473fa40c431b60d25b455a9adbb07c2397
+tuf==3.0.0 \
+    --hash=sha256:493f5e9dc60c6a216320a82e052f6bd6f4b12cf8dfafc90ce6de537545ccfa61 \
+    --hash=sha256:e8fb94cb38f472530d591c59e87f22698355a673231f5bf50d7d1da4842c0007
     # via sigstore
 twine==4.0.2 \
     --hash=sha256:929bc3c280033347a00f847236564d1c52a3e61b1ac2516c97c48f3ceab756d8 \