diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2abddef..3fe9234 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -212,7 +212,7 @@ jobs:
           echo "VERIFY FAILED: $VERSION not visible on CurseForge after upload"; exit 1
       - name: Publish ${{ matrix.subproject }} to CurseForge (mc-publish)
         if: steps.check_cf.outputs.cf_exists == 'false' && matrix.cf_mode == 'mcpublish'
-        uses: Kira-NT/mc-publish@52307b03863581dec6b652b83e597aec02ebb075  # v3 — SHA-pinned (moving v3 tag silently changed CF game-version resolution 2026-08-10)
+        uses: Kira-NT/mc-publish@c23376546a97f5ba7984e94445da359459b14419  # v3 — SHA-pinned (moving v3 tag silently changed CF game-version resolution 2026-08-10)
         with:
           curseforge-id: 991296
           curseforge-token: ${{ secrets.CURSEFORGE_TOKEN }}
@@ -274,7 +274,7 @@ jobs:
           echo "cf_count=$COUNT" >> $GITHUB_OUTPUT
       - name: Publish Forge 1.20.1 to CurseForge
         if: steps.check_cf.outputs.cf_exists == 'false'
-        uses: Kira-NT/mc-publish@52307b03863581dec6b652b83e597aec02ebb075  # v3 — SHA-pinned (moving v3 tag silently changed CF game-version resolution 2026-08-10)
+        uses: Kira-NT/mc-publish@c23376546a97f5ba7984e94445da359459b14419  # v3 — SHA-pinned (moving v3 tag silently changed CF game-version resolution 2026-08-10)
         with:
           curseforge-id: 991296
           curseforge-token: ${{ secrets.CURSEFORGE_TOKEN }}