diff --git a/.github/actions/ci/action.yml b/.github/actions/ci/action.yml
index a641ed5..e33800e 100644
--- a/.github/actions/ci/action.yml
+++ b/.github/actions/ci/action.yml
@@ -17,6 +17,7 @@ runs:
       if: "!startsWith(github.head_ref, 'changeset-release/')"
       with:
         node-version-file: .nvmrc
+        check-latest: true
         cache: pnpm
     - run: pnpm install --frozen-lockfile
       if: "!startsWith(github.head_ref, 'changeset-release/')"
diff --git a/.github/actions/docker-test/action.yml b/.github/actions/docker-test/action.yml
index 5da66c5..bba5924 100644
--- a/.github/actions/docker-test/action.yml
+++ b/.github/actions/docker-test/action.yml
@@ -57,6 +57,7 @@ runs:
     - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
       with:
         node-version-file: .nvmrc
+        check-latest: true
         cache: pnpm
 
     - name: Resolve service, version and Dockerfile
diff --git a/.github/workflows/apps-build-actions.yml b/.github/workflows/apps-build-actions.yml
index 2594166..b785398 100644
--- a/.github/workflows/apps-build-actions.yml
+++ b/.github/workflows/apps-build-actions.yml
@@ -18,6 +18,7 @@ jobs:
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: .nvmrc
+          check-latest: true
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - run: pnpm run build:slack-notify
@@ -35,6 +36,7 @@ jobs:
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: .nvmrc
+          check-latest: true
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - run: pnpm run build:upsert-changeset-comment
diff --git a/.github/workflows/apps-changeset-check.yml b/.github/workflows/apps-changeset-check.yml
index cf6718f..75e6d0b 100644
--- a/.github/workflows/apps-changeset-check.yml
+++ b/.github/workflows/apps-changeset-check.yml
@@ -22,6 +22,7 @@ jobs:
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: .nvmrc
+          check-latest: true
           cache: pnpm
 
       - run: pnpm install --frozen-lockfile
diff --git a/.github/workflows/apps-ci.yml b/.github/workflows/apps-ci.yml
index f693444..e1b7c80 100644
--- a/.github/workflows/apps-ci.yml
+++ b/.github/workflows/apps-ci.yml
@@ -16,6 +16,7 @@ jobs:
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: .nvmrc
+          check-latest: true
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - run: pnpm run lint
diff --git a/.github/workflows/apps-codegen-drift-check.yml b/.github/workflows/apps-codegen-drift-check.yml
index 762e719..4b802ad 100644
--- a/.github/workflows/apps-codegen-drift-check.yml
+++ b/.github/workflows/apps-codegen-drift-check.yml
@@ -21,6 +21,7 @@ jobs:
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: .nvmrc
+          check-latest: true
           cache: pnpm
 
       - run: pnpm install --frozen-lockfile
diff --git a/.github/workflows/apps-npm-release.yml b/.github/workflows/apps-npm-release.yml
index e935467..7fdfea3 100644
--- a/.github/workflows/apps-npm-release.yml
+++ b/.github/workflows/apps-npm-release.yml
@@ -71,6 +71,7 @@ jobs:
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: .nvmrc
+          check-latest: true
           cache: pnpm
           registry-url: 'https://registry.npmjs.org'
           # No node-auth-token — npm auth handled by OIDC
@@ -144,6 +145,7 @@ jobs:
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: .nvmrc
+          check-latest: true
           cache: pnpm
           registry-url: 'https://registry.npmjs.org'
           # No node-auth-token — npm auth handled by OIDC trusted publishing