diff --git a/pkg/actionpins/data/action_pins.json b/pkg/actionpins/data/action_pins.json
index 8a76c8303d5..1c1d3e4cd89 100644
--- a/pkg/actionpins/data/action_pins.json
+++ b/pkg/actionpins/data/action_pins.json
@@ -38,6 +38,11 @@
       "version": "v5.0.5",
       "sha": "27d5ce7f107fe9357f9df03efb73ab90386fccae"
     },
+    "actions/cache/save@v4": {
+      "repo": "actions/cache/save",
+      "version": "v4",
+      "sha": "0057852bfaa89a56745cba8c7296529d2fc39830"
+    },
     "actions/cache/save@v5.0.5": {
       "repo": "actions/cache/save",
       "version": "v5.0.5",
@@ -48,6 +53,11 @@
       "version": "v5.0.5",
       "sha": "27d5ce7f107fe9357f9df03efb73ab90386fccae"
     },
+    "actions/checkout@v4": {
+      "repo": "actions/checkout",
+      "version": "v4",
+      "sha": "34e114876b0b11c390a56381ad16ebd13914f8d5"
+    },
     "actions/checkout@v6.0.2": {
       "repo": "actions/checkout",
       "version": "v6.0.2",
@@ -88,6 +98,11 @@
       "version": "v6.4.0",
       "sha": "48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e"
     },
+    "actions/setup-python@v5": {
+      "repo": "actions/setup-python",
+      "version": "v5",
+      "sha": "a26af69be951a213d495a4c3e4e4022e16d87065"
+    },
     "actions/setup-python@v6.2.0": {
       "repo": "actions/setup-python",
       "version": "v6.2.0",
diff --git a/pkg/workflow/data/action_pins.json b/pkg/workflow/data/action_pins.json
index 8a76c8303d5..1c1d3e4cd89 100644
--- a/pkg/workflow/data/action_pins.json
+++ b/pkg/workflow/data/action_pins.json
@@ -38,6 +38,11 @@
       "version": "v5.0.5",
       "sha": "27d5ce7f107fe9357f9df03efb73ab90386fccae"
     },
+    "actions/cache/save@v4": {
+      "repo": "actions/cache/save",
+      "version": "v4",
+      "sha": "0057852bfaa89a56745cba8c7296529d2fc39830"
+    },
     "actions/cache/save@v5.0.5": {
       "repo": "actions/cache/save",
       "version": "v5.0.5",
@@ -48,6 +53,11 @@
       "version": "v5.0.5",
       "sha": "27d5ce7f107fe9357f9df03efb73ab90386fccae"
     },
+    "actions/checkout@v4": {
+      "repo": "actions/checkout",
+      "version": "v4",
+      "sha": "34e114876b0b11c390a56381ad16ebd13914f8d5"
+    },
     "actions/checkout@v6.0.2": {
       "repo": "actions/checkout",
       "version": "v6.0.2",
@@ -88,6 +98,11 @@
       "version": "v6.4.0",
       "sha": "48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e"
     },
+    "actions/setup-python@v5": {
+      "repo": "actions/setup-python",
+      "version": "v5",
+      "sha": "a26af69be951a213d495a4c3e4e4022e16d87065"
+    },
     "actions/setup-python@v6.2.0": {
       "repo": "actions/setup-python",
       "version": "v6.2.0",
diff --git a/pkg/workflow/engine_args_integration_test.go b/pkg/workflow/engine_args_integration_test.go
index 75dcb4659d1..b117e9005f1 100644
--- a/pkg/workflow/engine_args_integration_test.go
+++ b/pkg/workflow/engine_args_integration_test.go
@@ -258,19 +258,19 @@ This is a test workflow to verify codex engine args injection.
 
 	result := string(content)
 
-	// Check that the compiled YAML contains the custom args before INSTRUCTION
+	// Check that the compiled YAML contains the custom args before --prompt-file
 	if !strings.Contains(result, "--custom-flag value") {
 		t.Errorf("Expected compiled YAML to contain '--custom-flag value'")
 	}
 
-	// Verify args come before "$INSTRUCTION"
+	// Verify args come before "--prompt-file" (codex uses harness with --prompt-file)
 	customFlagIdx := strings.Index(result, "--custom-flag value")
-	instructionIdx := strings.Index(result, "\"$INSTRUCTION\"")
-	if customFlagIdx == -1 || instructionIdx == -1 {
-		t.Fatal("Could not find both --custom-flag and $INSTRUCTION in compiled YAML")
+	promptFileIdx := strings.Index(result, "--prompt-file")
+	if customFlagIdx == -1 || promptFileIdx == -1 {
+		t.Fatal("Could not find both --custom-flag and --prompt-file in compiled YAML")
 	}
-	if customFlagIdx > instructionIdx {
-		t.Error("Expected --custom-flag to come before $INSTRUCTION in compiled YAML")
+	if customFlagIdx > promptFileIdx {
+		t.Error("Expected --custom-flag to come before --prompt-file in compiled YAML")
 	}
 }