diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 8caf11e..8ade83b 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -10,5 +10,5 @@
   "playwright-gh-pages/upload-report-artifacts": "1.0.1",
   "publish-report": "1.0.3",
   "wait-for-grafana": "1.0.4",
-  "package-manager-detect": "1.0.1"
+  "package-manager-detect": "1.1.0"
 }
diff --git a/package-manager-detect/CHANGELOG.md b/package-manager-detect/CHANGELOG.md
index 82e66da..5198398 100644
--- a/package-manager-detect/CHANGELOG.md
+++ b/package-manager-detect/CHANGELOG.md
@@ -1,5 +1,17 @@
 # Changelog
 
+## [1.1.0](https://github.com/grafana/plugin-actions/compare/package-manager-detect/v1.0.1...package-manager-detect/v1.1.0) (2026-05-29)
+
+
+### 🎉 Features
+
+* **package-manager-detect:** secure npx command by pinning pm-detect version ([4cf3371](https://github.com/grafana/plugin-actions/commit/4cf3371519fe9b49b9ab7bf09d9ada4c13749e0a))
+
+
+### 🐛 Bug Fixes
+
+* pin pm-detect ([#234](https://github.com/grafana/plugin-actions/issues/234)) ([4cf3371](https://github.com/grafana/plugin-actions/commit/4cf3371519fe9b49b9ab7bf09d9ada4c13749e0a))
+
 ## [1.0.1](https://github.com/grafana/plugin-actions/compare/package-manager-detect/v1.0.0...package-manager-detect/v1.0.1) (2025-12-12)
 
 
diff --git a/package-manager-detect/README.md b/package-manager-detect/README.md
index 3652abe..1bbc630 100644
--- a/package-manager-detect/README.md
+++ b/package-manager-detect/README.md
@@ -61,7 +61,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - uses: grafana/plugin-actions/package-manager-detect@package-manager-detect/v1.0.1
+      - uses: grafana/plugin-actions/package-manager-detect@package-manager-detect/v1.1.0
       - id: packageManager
 
       - name: Setup Node.js