diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b92b7873a..18f9b8827 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,7 +21,7 @@ jobs:
           fetch-depth: 0
           submodules: recursive
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -43,7 +43,7 @@ jobs:
           with:
             fetch-depth: 0
             submodules: recursive
-        - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
+        - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
           with:
             # we need 'fetch' for this test, which is only in 18+
             node-version: 18
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 5c62a4fec..c325b133d 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -28,7 +28,7 @@ jobs:
         with:
           github_token: ${{ github.token }}
       - name: Setup Node
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         if: ${{ steps.release.outputs.releases_created }}
         with:
           node-version: 18