diff --git a/.github/workflows/test-template.yml b/.github/workflows/test-template.yml
index cc50633..bf17366 100644
--- a/.github/workflows/test-template.yml
+++ b/.github/workflows/test-template.yml
@@ -110,7 +110,7 @@ jobs:
       # install: false brings up the mise CLI only. persist_github_token
       # re-exports MISE_GITHUB_TOKEN (v5.1.1+ default is off) so the later
       # `mise install`/`mise exec` calls api.github.com authenticated.
-      - uses: jdx/mise-action@9b200bcecbfd6303e69a4a261b2e09e3757440a7 # v5.2.0
+      - uses: jdx/mise-action@d5574b52816a478f9d4e6529a3f6ff17a8a36785 # v5.2.8
         with:
           install: false
           persist_github_token: true