diff --git a/.github/workflows/_ci-check.yml b/.github/workflows/_ci-check.yml
index b8a6fe6..d46cbf4 100644
--- a/.github/workflows/_ci-check.yml
+++ b/.github/workflows/_ci-check.yml
@@ -137,7 +137,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
 
       - uses: actions/setup-node@v7
         with:
diff --git a/.github/workflows/_ci-e2e.yml b/.github/workflows/_ci-e2e.yml
index 14d7835..6bc8287 100644
--- a/.github/workflows/_ci-e2e.yml
+++ b/.github/workflows/_ci-e2e.yml
@@ -127,7 +127,7 @@ jobs:
           java-version: ${{ inputs.java-version }}
           cache: gradle
 
-      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
 
       - uses: actions/setup-node@v7
         with:
diff --git a/.github/workflows/_ci-lighthouse.yml b/.github/workflows/_ci-lighthouse.yml
index b13587b..bf27350 100644
--- a/.github/workflows/_ci-lighthouse.yml
+++ b/.github/workflows/_ci-lighthouse.yml
@@ -230,7 +230,7 @@ jobs:
           java-version: ${{ inputs.java-version }}
           cache: gradle
 
-      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
 
       - uses: actions/setup-node@v7
         with:
diff --git a/.github/workflows/_ci-node.yml b/.github/workflows/_ci-node.yml
index 9b1cc46..ba1901e 100644
--- a/.github/workflows/_ci-node.yml
+++ b/.github/workflows/_ci-node.yml
@@ -92,7 +92,7 @@ jobs:
         node: ${{ fromJSON(inputs.node-versions) }}
     steps:
       - uses: actions/checkout@v7
-      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
       - uses: actions/setup-node@v7
         with:
           node-version: ${{ matrix.node }}
@@ -113,7 +113,7 @@ jobs:
         node: ${{ fromJSON(inputs.node-versions) }}
     steps:
       - uses: actions/checkout@v7
-      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
       - uses: actions/setup-node@v7
         with:
           node-version: ${{ matrix.node }}
@@ -141,7 +141,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v7
-      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
       - uses: actions/setup-node@v7
         with:
           node-version: ${{ fromJSON(inputs.node-versions)[0] }}
diff --git a/.github/workflows/_codeql.yml b/.github/workflows/_codeql.yml
index 225ffa2..670e936 100644
--- a/.github/workflows/_codeql.yml
+++ b/.github/workflows/_codeql.yml
@@ -75,14 +75,14 @@ jobs:
           cache: true
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.37.9
+        uses: github/codeql-action/init@v4.38.2
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.language == 'go' && 'autobuild' || 'none' }}
           queries: security-extended,security-and-quality
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4.37.9
+        uses: github/codeql-action/analyze@v4.38.2
         with:
           category: '/language:${{ matrix.language }}'
 
diff --git a/.github/workflows/_deploy-wrangler.yml b/.github/workflows/_deploy-wrangler.yml
index b022dc4..4660d5d 100644
--- a/.github/workflows/_deploy-wrangler.yml
+++ b/.github/workflows/_deploy-wrangler.yml
@@ -113,7 +113,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
 
       - uses: actions/setup-node@v7
         with:
diff --git a/.github/workflows/_open-regenerated-pr.yml b/.github/workflows/_open-regenerated-pr.yml
index b69d1fc..93eaa17 100644
--- a/.github/workflows/_open-regenerated-pr.yml
+++ b/.github/workflows/_open-regenerated-pr.yml
@@ -133,7 +133,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
 
       - uses: actions/setup-node@v7
         with:
diff --git a/.github/workflows/_publish-npm.yml b/.github/workflows/_publish-npm.yml
index b4fc9b5..a88fe31 100644
--- a/.github/workflows/_publish-npm.yml
+++ b/.github/workflows/_publish-npm.yml
@@ -72,7 +72,7 @@ jobs:
         with:
           ref: ${{ inputs.prerelease && github.ref || inputs.tag-name }}
 
-      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
 
       - uses: actions/setup-node@v7
         with: