diff --git a/.github/workflows/app.yml b/.github/workflows/app.yml
index 25ad292777..fbbde3ee03 100644
--- a/.github/workflows/app.yml
+++ b/.github/workflows/app.yml
@@ -16,7 +16,7 @@ jobs:
           version: 10.16.1
           run_install: false
       - name: Setup Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: 24
           cache: pnpm
@@ -39,7 +39,7 @@ jobs:
           version: 10.16.1
           run_install: false
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.3.0
         with:
           node-version: 24
           cache: pnpm
@@ -62,7 +62,7 @@ jobs:
           version: 10.16.1
           run_install: false
       - name: Setup Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: 24
           cache: pnpm
@@ -105,7 +105,7 @@ jobs:
           run_install: false
 
       - name: Setup Node
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: 24
           cache: pnpm
diff --git a/.github/workflows/cli-e2e-tests.yml b/.github/workflows/cli-e2e-tests.yml
index cb8ea56f7b..e5d4e8f9f1 100644
--- a/.github/workflows/cli-e2e-tests.yml
+++ b/.github/workflows/cli-e2e-tests.yml
@@ -46,7 +46,7 @@ jobs:
           python-version: "3.13" # pinned because of poetry dependency issue
 
       - name: Set up Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: "24"
 
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 5a3e2e7103..c89a9de85a 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -16,7 +16,7 @@ jobs:
           version: 10.16.1
           run_install: false
       - name: Setup Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: 24
           cache: pnpm
@@ -45,7 +45,7 @@ jobs:
           version: 10.16.1
           run_install: false
       - name: Setup Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: 24
           cache: pnpm
@@ -77,7 +77,7 @@ jobs:
           version: 10.16.1
           run_install: false
       - name: Setup Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: 24
           cache: pnpm
diff --git a/.github/workflows/openvsx-release.yml b/.github/workflows/openvsx-release.yml
index 0e5344f328..986460937d 100644
--- a/.github/workflows/openvsx-release.yml
+++ b/.github/workflows/openvsx-release.yml
@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup Node.js
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: "24"
 
diff --git a/.github/workflows/sdk-typescript-manual-publish.yml b/.github/workflows/sdk-typescript-manual-publish.yml
index 70f4adf0b8..3c8155a0ac 100644
--- a/.github/workflows/sdk-typescript-manual-publish.yml
+++ b/.github/workflows/sdk-typescript-manual-publish.yml
@@ -18,7 +18,7 @@ jobs:
       - name: Install pnpm
         run: npm install -g pnpm@10.16.1
 
-      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: "24.x"
           registry-url: "https://registry.npmjs.org"
diff --git a/.github/workflows/sdk-typescript.yml b/.github/workflows/sdk-typescript.yml
index 74b172be3c..57e061c8f5 100644
--- a/.github/workflows/sdk-typescript.yml
+++ b/.github/workflows/sdk-typescript.yml
@@ -395,7 +395,7 @@ jobs:
       - name: Install pnpm
         run: npm install -g pnpm@10.16.1
 
-      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: "24.x"
           registry-url: "https://registry.npmjs.org"
diff --git a/.github/workflows/vscode-release.yml b/.github/workflows/vscode-release.yml
index 1a42a6202c..e1ba0cb834 100644
--- a/.github/workflows/vscode-release.yml
+++ b/.github/workflows/vscode-release.yml
@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup Node.js
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: '24'