diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
index e970315b..9783e582 100644
--- a/.github/workflows/ci-build.yml
+++ b/.github/workflows/ci-build.yml
@@ -33,7 +33,7 @@ jobs:
           submodules: recursive
 
       - name: Install Node.js
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: .nvmrc
 
diff --git a/.github/workflows/ci-lint.yml b/.github/workflows/ci-lint.yml
index b0433219..83d0e054 100644
--- a/.github/workflows/ci-lint.yml
+++ b/.github/workflows/ci-lint.yml
@@ -24,7 +24,7 @@ jobs:
           submodules: recursive
 
       - name: Install Node.js
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: .nvmrc
 
diff --git a/.github/workflows/update-toolchain.yml b/.github/workflows/update-toolchain.yml
index 367fda14..df9feed6 100644
--- a/.github/workflows/update-toolchain.yml
+++ b/.github/workflows/update-toolchain.yml
@@ -119,7 +119,7 @@ jobs:
       # so run the same checks here before opening the PR rather than relying on that.
       - name: Install Node.js
         if: steps.diff.outputs.changed == 'true'
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: .nvmrc