diff --git a/.github/workflows/dependency-audit.yml b/.github/workflows/dependency-audit.yml
index 655edf5..48483e7 100644
--- a/.github/workflows/dependency-audit.yml
+++ b/.github/workflows/dependency-audit.yml
@@ -46,7 +46,7 @@ jobs:
         working-directory: bindings/node
         run: npm ci --ignore-scripts
 
-      - uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # v1
+      - uses: ruby/setup-ruby@8e41b362d2589a22a44c1cfa214b3c83052c195b # v1
         with:
           ruby-version: "3.3"
       - name: Install Ruby binding deps
diff --git a/.github/workflows/publish-ruby.yml b/.github/workflows/publish-ruby.yml
index d454b72..732820f 100644
--- a/.github/workflows/publish-ruby.yml
+++ b/.github/workflows/publish-ruby.yml
@@ -179,7 +179,7 @@ jobs:
           pattern: cross-gem-*
           merge-multiple: true
           path: pkg
-      - uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # v1
+      - uses: ruby/setup-ruby@8e41b362d2589a22a44c1cfa214b3c83052c195b # v1
         with:
           ruby-version: "3.3"
       - name: Configure RubyGems credentials (OIDC trusted publishing)