diff --git a/.github/workflows/future_proof.yml b/.github/workflows/future_proof.yml
index 9ac761a3..c02f22b9 100644
--- a/.github/workflows/future_proof.yml
+++ b/.github/workflows/future_proof.yml
@@ -56,7 +56,7 @@ jobs:
       - name: Remove Gemfile.lock so we get the latest gems
         run: rm Gemfile.lock
       - name: Set up Ruby + Bundle
-        uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # ruby/setup-ruby@v1 see https://github.com/ruby/setup-ruby/tree/v1
+        uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # ruby/setup-ruby@v1 see https://github.com/ruby/setup-ruby/tree/v1
         with:
           bundler-cache: true
           ruby-version: ${{ matrix.ruby-version }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 1956df65..b550017e 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -13,7 +13,7 @@ jobs:
       with:
         fetch-depth: 0 # fetch everything
     - name: Set up Ruby + Bundle
-      uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # ruby/setup-ruby@v1 see https://github.com/ruby/setup-ruby/tree/v1
+      uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # ruby/setup-ruby@v1 see https://github.com/ruby/setup-ruby/tree/v1
       with:
         bundler-cache: true
     - name: Run RuboCop against BASE..HEAD changes
diff --git a/.github/workflows/static_code_analysis.yml b/.github/workflows/static_code_analysis.yml
index 247d6e37..3166ee72 100644
--- a/.github/workflows/static_code_analysis.yml
+++ b/.github/workflows/static_code_analysis.yml
@@ -10,7 +10,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # actions/checkout@v6 see https://github.com/actions/checkout/releases/tag/v6
       - name: Set up Ruby + Bundle
-        uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # ruby/setup-ruby@v1 see https://github.com/ruby/setup-ruby/tree/v1
+        uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # ruby/setup-ruby@v1 see https://github.com/ruby/setup-ruby/tree/v1
         with:
           bundler-cache: true
       - name: Run Brakeman analysis
@@ -22,7 +22,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # actions/checkout@v6 see https://github.com/actions/checkout/releases/tag/v6
       - name: Set up Ruby + Bundle
-        uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # ruby/setup-ruby@v1 see https://github.com/ruby/setup-ruby/tree/v1
+        uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # ruby/setup-ruby@v1 see https://github.com/ruby/setup-ruby/tree/v1
         with:
           bundler-cache: true
       - name: Audit the bundle
@@ -36,7 +36,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # actions/checkout@v6 see https://github.com/actions/checkout/releases/tag/v6
       - name: Set up Ruby + Bundle
-        uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # ruby/setup-ruby@v1 see https://github.com/ruby/setup-ruby/tree/v1
+        uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # ruby/setup-ruby@v1 see https://github.com/ruby/setup-ruby/tree/v1
         with:
           bundler-cache: true
       - name: Audit the yarn npm packages
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 9e45fc1e..32829821 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -58,7 +58,7 @@ jobs:
       - name: Use bundled npm files
         run: printf 'disable-self-update-check true\nyarn-offline-mirror "./vendor/npm-packages-offline-cache"\nyarn-offline-mirror-pruning false\n' > .yarnrc
       - name: Set up Ruby + Bundle
-        uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # ruby/setup-ruby@v1 see https://github.com/ruby/setup-ruby/tree/v1
+        uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # ruby/setup-ruby@v1 see https://github.com/ruby/setup-ruby/tree/v1
         with:
           bundler-cache: true
           ruby-version: ${{ matrix.ruby-version }}
@@ -133,7 +133,7 @@ jobs:
       - name: Use bundled npm files
         run: printf 'disable-self-update-check true\nyarn-offline-mirror "./vendor/npm-packages-offline-cache"\nyarn-offline-mirror-pruning false\n' > .yarnrc
       - name: Set up Ruby + Bundle
-        uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # ruby/setup-ruby@v1 see https://github.com/ruby/setup-ruby/tree/v1
+        uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # ruby/setup-ruby@v1 see https://github.com/ruby/setup-ruby/tree/v1
         with:
           bundler-cache: true
           ruby-version: ${{ matrix.ruby-version }}