diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index e46bf87..7d2233e 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -56,7 +56,7 @@ jobs:
       # the prompt must name the repo and PR explicitly, or Claude has nothing
       # to review and exits after a few turns without posting (pattern learned
       # from infobento.com issue #185).
-      - uses: anthropics/claude-code-action@9c5ddab2e6d17b83ea679153b31f1d5f023cf636 # v1.0.217
+      - uses: anthropics/claude-code-action@cfc3eb22bfed5c26ef66e3223c982af27e4524de # v1.0.231
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           prompt: |