diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 88a6117..e0c5edc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -56,7 +56,7 @@ jobs:
           chmod +x "$install_dir/fledge"
           echo "$install_dir" >> "$GITHUB_PATH"
       - name: Validate tagged source contract
-        uses: CorvidLabs/spec-sync@ef3678c2587f446e8f154f722765791ba0a8eaea # v5.2.0
+        uses: CorvidLabs/spec-sync@342bd053d410211c16fcd041a9eb94ed53012fe2 # v5.2.0
         with:
           version: "5.2.0"
           root: .
@@ -111,7 +111,7 @@ jobs:
           fledge trust adopt --dry-run --root "$FIXTURE"
           fledge trust adopt --root "$FIXTURE"
       - name: Install pinned SpecSync 5.2.0
-        uses: CorvidLabs/spec-sync@ef3678c2587f446e8f154f722765791ba0a8eaea # v5.2.0
+        uses: CorvidLabs/spec-sync@342bd053d410211c16fcd041a9eb94ed53012fe2 # v5.2.0
         with:
           version: "5.2.0"
           root: ${{ runner.temp }}/trust-tag-dogfood
diff --git a/action.yml b/action.yml
index 511f4f3..f0f5880 100644
--- a/action.yml
+++ b/action.yml
@@ -160,7 +160,7 @@ runs:
     - name: Contract gate
       if: steps.config.outputs.contract_enabled == 'true'
       id: contract
-      uses: CorvidLabs/spec-sync@ef3678c2587f446e8f154f722765791ba0a8eaea
+      uses: CorvidLabs/spec-sync@342bd053d410211c16fcd041a9eb94ed53012fe2
       with:
         version: ${{ steps.config.outputs.specsync_version }}
         download-base-url: ${{ steps.config.outputs.specsync_download_base_url }}