diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3d397ab..3b7aa6d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Verify required CI checks passed on release SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd  # was `@v8`
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3  # was `@v8`
         with:
           script: |
             const requiredExact = ["no-handwritten-model-types", "hardening", "intentproof-spec", "spec-golden-parity"];