diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 106e467..ad43f0f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -42,7 +42,7 @@ jobs:
       # .github/action-allowlist.txt for the scoping rationale. Never
       # blocking — this is observation, not enforcement.
       - name: Harden Runner
-        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1  # v2.21.1
+        uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2  # v2.22.2
         with:
           egress-policy: audit