diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3ab3b68..8fc6842 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -79,7 +79,7 @@ jobs:
       - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e #v7.0.0
         with:
           go-version: "1.26.9"
-      - uses: bufbuild/buf-action@85aebf73123b5c15fd5528aaecbf9129cddf7fa7 #v1.6.0
+      - uses: bufbuild/buf-action@37ac33d8960807670a6e9719080e885197b09cc6 #v1.7.0
         with:
           setup_only: true
           # Pinned so the drift check is reproducible; make proto documents the plugin pins.