diff --git a/.github/workflows/pr-labels.yml b/.github/workflows/pr-labels.yml
index d460514..5545ccd 100644
--- a/.github/workflows/pr-labels.yml
+++ b/.github/workflows/pr-labels.yml
@@ -100,7 +100,7 @@ jobs:
       - name: Run Codex labeling
         id: run_codex
         if: ${{ (github.event_name == 'workflow_dispatch' || steps.pr.outputs.is_fork != 'true') && github.actor != 'dependabot[bot]' }}
-        uses: openai/codex-action@086169432f1d2ab2f4057540b1754d550f6a1189
+        uses: openai/codex-action@c25d10f3f498316d4b2496cc4c6dd58057a7b031
         with:
           openai-api-key: ${{ secrets.PROD_OPENAI_API_KEY }}
           prompt-file: .github/codex/prompts/pr-labels.md
diff --git a/.github/workflows/release-pr-update.yml b/.github/workflows/release-pr-update.yml
index db3a0ce..b0dc9ac 100644
--- a/.github/workflows/release-pr-update.yml
+++ b/.github/workflows/release-pr-update.yml
@@ -74,7 +74,7 @@ jobs:
           echo "output_file=${output_file}" >> "$GITHUB_OUTPUT"
       - name: Run Codex release review
         if: steps.find.outputs.found == 'true'
-        uses: openai/codex-action@086169432f1d2ab2f4057540b1754d550f6a1189
+        uses: openai/codex-action@c25d10f3f498316d4b2496cc4c6dd58057a7b031
         with:
           openai-api-key: ${{ secrets.PROD_OPENAI_API_KEY }}
           prompt-file: .github/codex/prompts/release-review.md
diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml
index b48d0f0..82f4a01 100644
--- a/.github/workflows/release-pr.yml
+++ b/.github/workflows/release-pr.yml
@@ -101,7 +101,7 @@ jobs:
           mkdir -p "$output_dir"
           echo "output_file=${output_file}" >> "$GITHUB_OUTPUT"
       - name: Run Codex release review
-        uses: openai/codex-action@086169432f1d2ab2f4057540b1754d550f6a1189
+        uses: openai/codex-action@c25d10f3f498316d4b2496cc4c6dd58057a7b031
         with:
           openai-api-key: ${{ secrets.PROD_OPENAI_API_KEY }}
           prompt-file: .github/codex/prompts/release-review.md