diff --git a/.github/workflows/claude-adversarial-review.yml b/.github/workflows/claude-adversarial-review.yml
index 8f91569..a11ef6c 100644
--- a/.github/workflows/claude-adversarial-review.yml
+++ b/.github/workflows/claude-adversarial-review.yml
@@ -39,7 +39,7 @@ jobs:
       - name: Adversarial pass
         # Pinned to v1.0.112 (2026-05-04) — see claude-review.yml for context
         # (ci-workflows#37: v1.0.113/.114 regression breaks the setup step).
-        uses: anthropics/claude-code-action@1298632ce7736903d02a1435002705aa2a594a6c # v1.0.175
+        uses: anthropics/claude-code-action@44423bdec74b97d67543eb16c110546762c110b2 # v1.0.181
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           prompt: |
diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index 4dd29e1..27983b7 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -106,7 +106,7 @@ jobs:
         # Code native binary, causing every Claude Review across the fleet to
         # fail with "Claude Code native binary not found". See ci-workflows#37.
         # Restore to @v1 (or a fresh SHA) once upstream ships a fix.
-        uses: anthropics/claude-code-action@1298632ce7736903d02a1435002705aa2a594a6c # v1.0.175
+        uses: anthropics/claude-code-action@44423bdec74b97d67543eb16c110546762c110b2 # v1.0.181
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           # Allow bot-initiated PRs (dependabot, renovate). Without this the
diff --git a/.github/workflows/verifier-on-high-risk.yml b/.github/workflows/verifier-on-high-risk.yml
index 57f9749..e69efba 100644
--- a/.github/workflows/verifier-on-high-risk.yml
+++ b/.github/workflows/verifier-on-high-risk.yml
@@ -283,7 +283,7 @@ jobs:
         if: steps.classify.outputs.matched == 'yes'
         id: verifier
         continue-on-error: true # keep the workflow running so we can post the check-run with FAILURE conclusion
-        uses: anthropics/claude-code-action@1298632ce7736903d02a1435002705aa2a594a6c # v1.0.175
+        uses: anthropics/claude-code-action@44423bdec74b97d67543eb16c110546762c110b2 # v1.0.181
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           prompt: ${{ steps.prompt.outputs.text }}