diff --git a/.github/workflows/build-wasm.yml b/.github/workflows/build-wasm.yml
index d18f53ee6..02560f7ec 100644
--- a/.github/workflows/build-wasm.yml
+++ b/.github/workflows/build-wasm.yml
@@ -29,7 +29,7 @@ jobs:
           autocrlf: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           node-version: '22'
 
diff --git a/.github/workflows/publish-socketbin.yml b/.github/workflows/publish-socketbin.yml
index d66734f3e..41b7c81a2 100644
--- a/.github/workflows/publish-socketbin.yml
+++ b/.github/workflows/publish-socketbin.yml
@@ -69,7 +69,7 @@ jobs:
           autocrlf: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           node-version: 22
           registry-url: 'https://registry.npmjs.org'
@@ -129,7 +129,7 @@ jobs:
           autocrlf: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           node-version: 22
           registry-url: 'https://registry.npmjs.org'
@@ -287,7 +287,7 @@ jobs:
           autocrlf: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           node-version: 22
           registry-url: 'https://registry.npmjs.org'
diff --git a/.github/workflows/test-sea-fallback.yml b/.github/workflows/test-sea-fallback.yml
index 6eadefa5e..c38e0e525 100644
--- a/.github/workflows/test-sea-fallback.yml
+++ b/.github/workflows/test-sea-fallback.yml
@@ -42,7 +42,7 @@ jobs:
           sparse-checkout: |
             packages/node-smol-builder/scripts/build.mjs
 
-      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           node-version: '20'