diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 27d142c..88a44c5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -487,7 +487,7 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5
+        uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5
 
   # Publishing is deliberate, not automatic: it runs only when a version tag (v1.2.3) is pushed, never on a
   # regular push to main. Nothing is ever packed or pushed by hand - see the "Releases" section of AGENTS.md.