diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8b4051a..112c267 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,7 +21,7 @@ jobs:
     name: hooks + lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Install jq
         # The hooks parse Claude Code's PreToolUse JSON with jq; the suite
@@ -29,7 +29,7 @@ jobs:
         # keeps the requirement visible rather than inherited.
         run: sudo apt-get install -y jq
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
 
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 95900d0..ea4c5ea 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.8.6] - 2026-09-16
+
+### Changed
+- Dependencies: bump the actions group with 2 updates (Dependabot).
+
 ## [1.8.5] - 2026-09-16
 
 ### Added
diff --git a/VERSION b/VERSION
index ff2fd4f..9eadd6b 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-1.8.5
\ No newline at end of file
+1.8.6
\ No newline at end of file