diff --git a/.github/workflows/catalog-refresh.yml b/.github/workflows/catalog-refresh.yml
index 551eb97..2ffdc9b 100644
--- a/.github/workflows/catalog-refresh.yml
+++ b/.github/workflows/catalog-refresh.yml
@@ -76,7 +76,7 @@ jobs:
       - name: install dependencies
         run: python -m pip install --upgrade pip && python -m pip install -e .
       - name: re-pin the catalog
-        uses: anthropics/claude-code-action@a874e9ecd7bb36efdad65429c6b35815f5a08f10 # v1
+        uses: anthropics/claude-code-action@9cdae7f0d995e3ba7c33f226087fdf82a59cd520 # v1
         with:
           # Either secret works; set exactly one (docs/contributing/releasing.md).
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
index 8dfd4e9..783efd6 100644
--- a/.github/workflows/changelog.yml
+++ b/.github/workflows/changelog.yml
@@ -151,7 +151,7 @@ jobs:
       # working tree.
       - name: draft the entries for this branch
         if: needs.mode.outputs.mode == 'draft'
-        uses: anthropics/claude-code-action@a874e9ecd7bb36efdad65429c6b35815f5a08f10 # v1
+        uses: anthropics/claude-code-action@9cdae7f0d995e3ba7c33f226087fdf82a59cd520 # v1
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
@@ -215,7 +215,7 @@ jobs:
 
       - name: curate the promoted section
         if: steps.promoted.outputs.needs_curation == 'true'
-        uses: anthropics/claude-code-action@a874e9ecd7bb36efdad65429c6b35815f5a08f10 # v1
+        uses: anthropics/claude-code-action@9cdae7f0d995e3ba7c33f226087fdf82a59cd520 # v1
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
diff --git a/.github/workflows/contract-drift.yml b/.github/workflows/contract-drift.yml
index 72e185c..c450707 100644
--- a/.github/workflows/contract-drift.yml
+++ b/.github/workflows/contract-drift.yml
@@ -112,7 +112,7 @@ jobs:
           name: contract-drift-report
           path: drift-report
       - name: audit the selected snapshots
-        uses: anthropics/claude-code-action@a874e9ecd7bb36efdad65429c6b35815f5a08f10 # v1
+        uses: anthropics/claude-code-action@9cdae7f0d995e3ba7c33f226087fdf82a59cd520 # v1
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
diff --git a/.github/workflows/pricing-refresh.yml b/.github/workflows/pricing-refresh.yml
index 89c9660..d3de5fe 100644
--- a/.github/workflows/pricing-refresh.yml
+++ b/.github/workflows/pricing-refresh.yml
@@ -90,7 +90,7 @@ jobs:
           name: pricing-drift-report
           path: pricing-report
       - name: verify pricing and update the table
-        uses: anthropics/claude-code-action@a874e9ecd7bb36efdad65429c6b35815f5a08f10 # v1
+        uses: anthropics/claude-code-action@9cdae7f0d995e3ba7c33f226087fdf82a59cd520 # v1
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}