diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e5464f4..bcf2e52 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -28,7 +28,7 @@ jobs:
       # Installs prek from mise.toml; mise.lock pins its URL and checksum
       # (the action adds --locked). The mise binary itself is pinned here and
       # checked against mise's signed checksums.
-      - uses: jdx/mise-action@8418fedb1110381a0d3ba51a7a415d7c1b884550 # v5.2.2
+      - uses: jdx/mise-action@82a612c5ab8bcda7cc5db6b7e81a8e7584c3dc6e # v5.2.3
         with:
           version: 2026.10.5
           cache: false