diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index beab259..7a9fcdf 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -33,10 +33,10 @@ jobs:
           distribution: 'temurin'
           java-version: '17'
           server-id: central
-          server-username: SONATYPE_USERNAME
-          server-password: SONATYPE_TOKEN
+          server-username-env-var: SONATYPE_USERNAME
+          server-password-env-var: SONATYPE_TOKEN
           gpg-private-key: ${{ secrets.JRELEASER_GPG_SECRET_KEY }}
-          gpg-passphrase: MAVEN_GPG_PASSPHRASE
+          gpg-passphrase-env-var: MAVEN_GPG_PASSPHRASE
           cache: maven
 
       - name: Verify GPG private key import
diff --git a/src/pom.xml b/src/pom.xml
index 7fb7f78..df6d1e1 100644
--- a/src/pom.xml
+++ b/src/pom.xml
@@ -127,7 +127,7 @@
                     <plugin>
                         <groupId>org.apache.maven.plugins</groupId>
                         <artifactId>maven-gpg-plugin</artifactId>
-                        <version>3.1.0</version>
+                        <version>3.2.8</version>
                         <configuration>
                             <gpgArguments>
                                 <arg>--pinentry-mode</arg>