diff --git a/.github/workflows/codex-pr-review.yml b/.github/workflows/codex-pr-review.yml
index f2fa69f..024998b 100644
--- a/.github/workflows/codex-pr-review.yml
+++ b/.github/workflows/codex-pr-review.yml
@@ -62,7 +62,7 @@ jobs:
       pull-requests: write
       issues: write
     steps:
-      - uses: codemod/codex-review-action@d49c8fe12fbe11de606f337a662b2d36086c2fa7
+      - uses: codemod/codex-review-action@cab4995d432f77fae403cedd972a77da57f5db49
         with:
           github_token: ${{ github.token }}
           pr_number: ${{ needs.resolve-pr.outputs.pr_number }}
diff --git a/.github/workflows/codex-review-command.yml b/.github/workflows/codex-review-command.yml
index 1864deb..680a1de 100644
--- a/.github/workflows/codex-review-command.yml
+++ b/.github/workflows/codex-review-command.yml
@@ -98,7 +98,7 @@ jobs:
       issues: write # Let the composite action upsert its summary comment.
     steps:
       # The sync workflow replaces @main; pin it manually when copying this template elsewhere.
-      - uses: codemod/codex-review-action@d49c8fe12fbe11de606f337a662b2d36086c2fa7 # zizmor: ignore[unpinned-uses] -- sync-action-pins replaces this template ref with a full SHA.
+      - uses: codemod/codex-review-action@cab4995d432f77fae403cedd972a77da57f5db49 # zizmor: ignore[unpinned-uses] -- sync-action-pins replaces this template ref with a full SHA.
         with:
           github_token: ${{ github.token }}
           pr_number: ${{ github.event.issue.number }}
@@ -130,7 +130,7 @@ jobs:
       pull-requests: write # Let only the called workflow's posting job write reviews.
       issues: write # Let only the called workflow's posting job upsert its summary.
     # The sync workflow replaces @main; pin it manually when copying this template elsewhere.
-    uses: codemod/codex-review-action/.github/workflows/fork-review.yml@d49c8fe12fbe11de606f337a662b2d36086c2fa7 # zizmor: ignore[unpinned-uses] -- sync-action-pins replaces this template ref with a full SHA.
+    uses: codemod/codex-review-action/.github/workflows/fork-review.yml@cab4995d432f77fae403cedd972a77da57f5db49 # zizmor: ignore[unpinned-uses] -- sync-action-pins replaces this template ref with a full SHA.
     with:
       pr_number: ${{ github.event.issue.number }}
       codex_model: ${{ vars.AZURE_OPENAI_CODEX_MODEL }}