diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7c989e5..18ab00d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -79,7 +79,7 @@ jobs:
       - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e #v7.0.0
         with:
           go-version: "1.26.9"
-      - uses: bufbuild/buf-action@8c6a16e16f12ba20b6470afa9c2ba9b5ba8c97c3 #v1
+      - uses: bufbuild/buf-action@85aebf73123b5c15fd5528aaecbf9129cddf7fa7 #v1.6.0
         with:
           setup_only: true
           # Pinned so the drift check is reproducible; make proto documents the plugin pins.