diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index b5e49600..7d45ea77 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -44,3 +44,8 @@ updates:
         update-types:
           - "minor"
           - "patch"
+    ignore:
+      # v1.12 hangs after the codex turn completes (openai/codex-action#150);
+      # drop this once the action-side fix (openai/codex-action#151) is released.
+      - dependency-name: "openai/codex-action"
+        versions: ["1.12"]
diff --git a/.github/workflows/ai_pr_review.yml b/.github/workflows/ai_pr_review.yml
index b8338885..84e0b041 100644
--- a/.github/workflows/ai_pr_review.yml
+++ b/.github/workflows/ai_pr_review.yml
@@ -515,7 +515,7 @@ jobs:
       - name: Run Codex
         id: run_codex
         if: steps.pr.outputs.is_fork == 'false'
-        uses: openai/codex-action@86365089eb2b84e0a8fb0717b304f8bdcb13b20e # v1
+        uses: openai/codex-action@52fe01ec70a42f454c9d2ebd47598f9fd6893d56 # v1.11 — pinned: v1.12 hangs after turn completes (openai/codex-action#150); re-bump once #151 ships
         with:
           openai-api-key: ${{ secrets.OPENAI_API_KEY }}
           prompt-file: .github/codex/prompts/pr_review_compiled.md