diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index a42813f1ad..fc9df8603a 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -197,6 +197,9 @@
     <action issue="COLLECTIONS-793" type="fix" dev="kinow" due-to="Arturo Bernal">
       Simplify Assertion.
     </action>
+    <action dev="ggregory" type="fix" due-to="step-security-bot, Gary Gregory">
+      [StepSecurity] ci: Harden GitHub Actions #401.
+    </action>
     <!-- ADD -->
     <action issue="COLLECTIONS-748" dev="ggregory" type="add" due-to="Gary Gregory">
       Let org.apache.commons.collections4.properties.[Sorted]PropertiesFactory accept XML input.