diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ff86b0c7..adba9e1f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -365,7 +365,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: gitleaks/gitleaks-action@dcedce43c6f43de0b836d1fe38946645c9c638dc  # v2
+      - uses: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7  # v2
         env:
           # Pin the gitleaks binary version. Dependabot tracks the action
           # (above) but not this env, so bump manually on a schedule and
diff --git a/.pi/orksorksorks/dependabot-github_actions-gitleaks-gitleaks-action-ff98106e4c7b2bc287b24eaf42907196329070c7/done.md b/.pi/orksorksorks/dependabot-github_actions-gitleaks-gitleaks-action-ff98106e4c7b2bc287b24eaf42907196329070c7/done.md
new file mode 100644
index 00000000..be514e56
--- /dev/null
+++ b/.pi/orksorksorks/dependabot-github_actions-gitleaks-gitleaks-action-ff98106e4c7b2bc287b24eaf42907196329070c7/done.md
@@ -0,0 +1,4 @@
+# Done
+
+Marshaled from https://github.com/alanvardy/SingleThread/pull/192
+Branch: dependabot/github_actions/gitleaks/gitleaks-action-ff98106e4c7b2bc287b24eaf42907196329070c7