diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a75f847..516b461 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -88,7 +88,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.0.2
         with:
           persist-credentials: false
-      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.4.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6.4.0
         with:
           node-version: '22'
           cache: npm
@@ -124,7 +124,7 @@ jobs:
         with:
           go-version-file: go.mod
           cache-dependency-path: go.sum
-      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.4.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6.4.0
         with:
           node-version: '24'
       - name: Install pinned pnpm
diff --git a/.github/workflows/demo-deploy.yml b/.github/workflows/demo-deploy.yml
index 764e411..6abeb7f 100644
--- a/.github/workflows/demo-deploy.yml
+++ b/.github/workflows/demo-deploy.yml
@@ -45,7 +45,7 @@ jobs:
         with:
           go-version-file: go.mod
           cache-dependency-path: go.sum
-      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.4.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6.4.0
         with:
           node-version: '24'
       - name: Install pinned pnpm
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 53e3174..1df1d55 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -46,7 +46,7 @@ jobs:
           go run ./cmd/release-tool dist --version "$RELEASE_TAG" --json
           go run ./cmd/release-tool dist --version "$RELEASE_TAG" --json
           go run ./cmd/release-tool verify --version "$RELEASE_TAG" --json
-      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.4.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6.4.0
         with:
           node-version: '24'
           cache: npm