diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index aa7aba4..75cf939 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -45,7 +45,11 @@ jobs:
**/*.csproj
- name: Install Nerdbank.GitVersioning CLI
- run: dotnet tool install --global nbgv --version 3.9.50
+ # Pinned to the latest stable nbgv, kept in sync with the
+ # Nerdbank.GitVersioning package so the CLI's version math matches the
+ # assembly stamping. --allow-downgrade keeps this deterministic if the
+ # hosted runner ever preinstalls a newer nbgv than we pin.
+ run: dotnet tool install --global nbgv --version 3.10.85 --allow-downgrade
- name: Derive version + channel from NBGV
id: meta
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 49de299..ff4c2d0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
restores it. The Reset button turns the hotkey back on and restores the
Ctrl+Alt+S default.
+### Changed
+- Refreshed dependencies to their latest stable releases (Markdig, WebView2,
+ Windows SDK build tools, Spectre.Console, the test SDK and the versioning tool).
+
+### Fixed
+- The release pipeline no longer fails to install the pinned Nerdbank.GitVersioning
+ CLI when the hosted runner ships a newer build.
+
## [1.0.4] - 2026-06-10
### Changed
diff --git a/Directory.Packages.props b/Directory.Packages.props
index e47f405..4086367 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -7,14 +7,14 @@
-
+
-
+
@@ -28,24 +28,24 @@
-
-
+
+
-
+
-
+
-
+