diff --git a/.github/workflows/composer-auto.yml b/.github/workflows/composer-auto.yml
index 5f3c48bfc..780f75ab5 100644
--- a/.github/workflows/composer-auto.yml
+++ b/.github/workflows/composer-auto.yml
@@ -84,7 +84,7 @@ jobs:
           git config --local user.name 'nextcloud-command'
 
       - name: Set up php
-        uses: shivammathur/setup-php@0f7f1d08e3e32076e51cae65eb0b0c871405b16e # v2.34.1
+        uses: shivammathur/setup-php@ec406be512d7077f68eed36e63f4d91bc006edc4 # v2.35.4
         with:
           php-version: 8.1
           coverage: none
diff --git a/.github/workflows/composer.yml b/.github/workflows/composer.yml
index 6b2d3ae2f..b84f1c97c 100644
--- a/.github/workflows/composer.yml
+++ b/.github/workflows/composer.yml
@@ -22,7 +22,7 @@ jobs:
         persist-credentials: false
 
     - name: Set up php
-      uses: shivammathur/setup-php@0f7f1d08e3e32076e51cae65eb0b0c871405b16e # v2.34.1
+      uses: shivammathur/setup-php@ec406be512d7077f68eed36e63f4d91bc006edc4 # v2.35.4
       with:
         php-version: 8.1
         coverage: none
diff --git a/.github/workflows/lint-php.yml b/.github/workflows/lint-php.yml
index ffec0e2ba..c90c0509a 100644
--- a/.github/workflows/lint-php.yml
+++ b/.github/workflows/lint-php.yml
@@ -30,7 +30,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up php ${{ matrix.php-versions }}
-        uses: shivammathur/setup-php@0f7f1d08e3e32076e51cae65eb0b0c871405b16e #v2.34.1
+        uses: shivammathur/setup-php@ec406be512d7077f68eed36e63f4d91bc006edc4 #v2.35.4
         with:
           php-version: ${{ matrix.php-versions }}
           extensions: bz2, ctype, curl, dom, fileinfo, gd, iconv, intl, json, libxml, mbstring, openssl, pcntl, posix, session, simplexml, xmlreader, xmlwriter, zip, zlib, sqlite, pdo_sqlite