diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
index f2062d4..3c9cbb2 100644
--- a/.github/workflows/sonarcloud.yml
+++ b/.github/workflows/sonarcloud.yml
@@ -34,7 +34,7 @@ jobs:
       # coverage describes a suite smaller than the one that exists. Same pinned
       # major as test.yml, for the same reason.
       - name: Set up Node (the UI tests need it, and skip without it)
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "26"
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a2a4534..66b7633 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -40,7 +40,7 @@ jobs:
       # have to mean the same thing, and a runner silently moving to another major
       # is how they stop meaning it.
       - name: Set up Node (the UI tests need it, and skip without it)
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "26"