diff --git a/.github/workflows/hourly-product-development.yml b/.github/workflows/hourly-product-development.yml
index a612bdc..da144c5 100644
--- a/.github/workflows/hourly-product-development.yml
+++ b/.github/workflows/hourly-product-development.yml
@@ -49,7 +49,7 @@ jobs:
       patch_sha256: ${{ steps.package.outputs.patch_sha256 }}
     steps:
       - name: Harden runner and block undeclared egress
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: block
           disable-telemetry: true
@@ -639,7 +639,7 @@ jobs:
       publish: ${{ steps.seal.outputs.publish }}
     steps:
       - name: Harden independent verification
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: block
           disable-telemetry: true
@@ -780,7 +780,7 @@ jobs:
       pull-requests: read
     steps:
       - name: Harden publication
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: block
           disable-telemetry: true