diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c0059028..750c7dce 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -284,7 +284,7 @@ jobs:
       # The version in package.json is synced by cut-release.yml when a release branch is created.
 
       - name: Set up Node.js
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "22"
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c46a30e6..1721f657 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -250,7 +250,7 @@ jobs:
           echo "VSIX version set to $VERSION (from tag $RELEASE_TAG)"
 
       - name: Set up Node.js
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "22"
 
diff --git a/.github/workflows/staging.yml b/.github/workflows/staging.yml
index 189cc595..1775dc2e 100644
--- a/.github/workflows/staging.yml
+++ b/.github/workflows/staging.yml
@@ -156,7 +156,7 @@ jobs:
           echo "VSIX version set to $VERSION (from branch $BRANCH)"
 
       - name: Set up Node.js
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "22"