diff --git a/.github/workflows/codex-review.yaml b/.github/workflows/codex-review.yaml
index a987d4a..2b193fc 100644
--- a/.github/workflows/codex-review.yaml
+++ b/.github/workflows/codex-review.yaml
@@ -282,7 +282,7 @@ jobs:
       # the authorization decision already made by the check job.
       - name: Run Codex review
         id: run_codex
-        uses: openai/codex-action@52fe01ec70a42f454c9d2ebd47598f9fd6893d56 # v1.11
+        uses: openai/codex-action@86365089eb2b84e0a8fb0717b304f8bdcb13b20e # v1.12
         with:
           allow-users: ${{ github.actor }}
           codex-args: '["review", "-", "--config", "model_reasoning_effort=\"${{ needs.check.outputs.effort }}\""]'