diff --git a/CHANGELOG.md b/CHANGELOG.md
index e998a95d9..8b95ec18e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,7 @@ and this project's packages adheres to [Semantic Versioning](http://semver.org/s
   - Migrate sigs.k8s.io/cluster-api-provider-aws to v2 (2.2.4).
   - Upgrade sigs.k8s.io/cluster-api-provider-azure to v1.11.4.
   - Upgrade sigs.k8s.io/controller-runtime to v0.16.3.
+  - Upgrade github.com/coreos/go-oidc/v3 to v3.6.0.
   - Upgrade other dependencies.
   - Replace capi.ClusterLabelName with capi.ClusterNameLabel.
 
diff --git a/pkg/oidc/oidc.go b/pkg/oidc/oidc.go
index ba9c4569d..34fc1f0e9 100644
--- a/pkg/oidc/oidc.go
+++ b/pkg/oidc/oidc.go
@@ -11,7 +11,7 @@ import (
 )
 
 type Authenticator struct {
-	provider     gooidc.Provider
+	provider     *gooidc.Provider
 	clientConfig oauth2.Config
 	challenge    string
 }
@@ -62,7 +62,7 @@ func New(ctx context.Context, c Config) (*Authenticator, error) {
 	}
 
 	a := &Authenticator{
-		provider:     *provider,
+		provider:     provider,
 		clientConfig: oauthConfig,
 		challenge:    challenge,
 	}