diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5277455..9645999 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -22,7 +22,7 @@ jobs:
       contents: write       # push the `release/vX.Y.Z` branch and delete superseded ones
       pull-requests: write  # create a release PR, update its body, close superseded PRs
     steps:
-      - uses: danielroe/uppt/pr@7bcfb5397c37202ef882363f755423130419d28a # v0.5.5
+      - uses: danielroe/uppt/pr@a270063dd6a75376b151cdfb85c96266c62bd70e # v0.6.6
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
@@ -44,7 +44,7 @@ jobs:
       contents: write       # push the `vX.Y.Z` tag and create the GitHub release
       actions: write        # `gh workflow run release.yml --ref vX.Y.Z` chained dispatch
     steps:
-      - uses: danielroe/uppt/release@7bcfb5397c37202ef882363f755423130419d28a # v0.5.5
+      - uses: danielroe/uppt/release@a270063dd6a75376b151cdfb85c96266c62bd70e # v0.6.6
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
@@ -63,7 +63,7 @@ jobs:
       files: ${{ steps.pack.outputs.files }}
     steps:
       - id: pack
-        uses: danielroe/uppt/pack@7bcfb5397c37202ef882363f755423130419d28a # v0.5.5
+        uses: danielroe/uppt/pack@a270063dd6a75376b151cdfb85c96266c62bd70e # v0.6.6
 
   # `publish` downloads the prebuilt tarball from the pack job's
   # artifact and stages it for publish.
@@ -81,6 +81,6 @@ jobs:
       id-token: write       # OIDC claim for npm trusted publisher
     environment: npm        # must match the trusted-publisher entry on npmjs.com
     steps:
-      - uses: danielroe/uppt/publish@7bcfb5397c37202ef882363f755423130419d28a # v0.5.5
+      - uses: danielroe/uppt/publish@a270063dd6a75376b151cdfb85c96266c62bd70e # v0.6.6
         with:
           files: ${{ needs.pack.outputs.files }}
diff --git a/package.json b/package.json
index ae5d8e3..665bb07 100644
--- a/package.json
+++ b/package.json
@@ -2,7 +2,7 @@
   "name": "clickable-path",
   "type": "module",
   "version": "0.0.1",
-  "packageManager": "pnpm@11.22.0",
+  "packageManager": "pnpm@11.23.0",
   "description": "Make file paths printed by CLIs ctrl/cmd-clickable, using OSC 8 hyperlinks",
   "license": "MIT",
   "repository": "danielroe/clickable-path",