diff --git a/.github/workflows/claude-assistant.yml b/.github/workflows/claude-assistant.yml
index 2295088..4979f10 100644
--- a/.github/workflows/claude-assistant.yml
+++ b/.github/workflows/claude-assistant.yml
@@ -241,7 +241,7 @@ jobs:
         # @claude (or re-dispatch) rather than relying on an automatic retry.
         continue-on-error: true
         timeout-minutes: 12
-        uses: anthropics/claude-code-action@9c5ddab2e6d17b83ea679153b31f1d5f023cf636 # v1.0.217
+        uses: anthropics/claude-code-action@19dda84776b3518d98b8798e591daee763049ed3 # v1.0.220
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           # Empty prompt on mention events → tag mode uses the @claude comment.
diff --git a/.github/workflows/claude-e2e-verify.yml b/.github/workflows/claude-e2e-verify.yml
index 9e5bee2..48c52a6 100644
--- a/.github/workflows/claude-e2e-verify.yml
+++ b/.github/workflows/claude-e2e-verify.yml
@@ -538,7 +538,7 @@ jobs:
         # showing as a red check — this lane is advisory.
         continue-on-error: true
         timeout-minutes: ${{ inputs.timeout-minutes }}
-        uses: anthropics/claude-code-action@9c5ddab2e6d17b83ea679153b31f1d5f023cf636 # v1.0.217
+        uses: anthropics/claude-code-action@19dda84776b3518d98b8798e591daee763049ed3 # v1.0.220
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           claude_args: ${{ inputs.claude-args }}
@@ -745,7 +745,7 @@ jobs:
         # ceiling.
         continue-on-error: true
         timeout-minutes: ${{ inputs.timeout-minutes }}
-        uses: anthropics/claude-code-action@9c5ddab2e6d17b83ea679153b31f1d5f023cf636 # v1.0.217
+        uses: anthropics/claude-code-action@19dda84776b3518d98b8798e591daee763049ed3 # v1.0.220
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           claude_args: ${{ inputs.claude-args }}
diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index 2b060bc..ea0a6cb 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -785,7 +785,7 @@ jobs:
         # retry below.
         continue-on-error: true
         timeout-minutes: 11
-        uses: anthropics/claude-code-action@9c5ddab2e6d17b83ea679153b31f1d5f023cf636 # v1.0.217
+        uses: anthropics/claude-code-action@19dda84776b3518d98b8798e591daee763049ed3 # v1.0.220
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           # track_progress is pull_request-only upstream; forcing it on
@@ -1025,7 +1025,7 @@ jobs:
         # budget.
         continue-on-error: true
         timeout-minutes: 11
-        uses: anthropics/claude-code-action@9c5ddab2e6d17b83ea679153b31f1d5f023cf636 # v1.0.217
+        uses: anthropics/claude-code-action@19dda84776b3518d98b8798e591daee763049ed3 # v1.0.220
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           # track_progress is pull_request-only upstream; forcing it on
diff --git a/.github/workflows/claude-security-review.yml b/.github/workflows/claude-security-review.yml
index 89dbe88..bdbba88 100644
--- a/.github/workflows/claude-security-review.yml
+++ b/.github/workflows/claude-security-review.yml
@@ -1142,7 +1142,7 @@ jobs:
         # leaves room for the retry (see the retry formula there).
         continue-on-error: true
         timeout-minutes: 18
-        uses: anthropics/claude-code-action@9c5ddab2e6d17b83ea679153b31f1d5f023cf636 # v1.0.217
+        uses: anthropics/claude-code-action@19dda84776b3518d98b8798e591daee763049ed3 # v1.0.220
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           # track_progress is pull_request-only upstream; forcing it on
@@ -1411,7 +1411,7 @@ jobs:
         # and the same step timeout keeps the retry inside the job budget.
         continue-on-error: true
         timeout-minutes: 18
-        uses: anthropics/claude-code-action@9c5ddab2e6d17b83ea679153b31f1d5f023cf636 # v1.0.217
+        uses: anthropics/claude-code-action@19dda84776b3518d98b8798e591daee763049ed3 # v1.0.220
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           # track_progress is pull_request-only upstream; forcing it on