diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 976c845..577b6a2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ jobs:
         ruby: ["3.0", "3.1", "3.2", "3.3"]
     steps:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
-      - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1
+      - uses: ruby/setup-ruby@bec3f19a76460dbe12f60def7d1a77585f07516c # v1
         with:
           ruby-version: ${{ matrix.ruby }}
           bundler-cache: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fa3b13e..e67e621 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,7 +24,7 @@ jobs:
       - name: Tag must match the manifest version
         if: github.ref_type == 'tag'
         run: test "v$(sed -n 's/.*VERSION = "\(.*\)"/\1/p' lib/millionsend/version.rb)" = "$GITHUB_REF_NAME"
-      - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1
+      - uses: ruby/setup-ruby@bec3f19a76460dbe12f60def7d1a77585f07516c # v1
         with:
           ruby-version: "3.3"
           bundler-cache: true