diff --git a/.github/workflows/aip-npm-release.yaml b/.github/workflows/aip-npm-release.yaml
index 50b07bdac8..06707e628a 100644
--- a/.github/workflows/aip-npm-release.yaml
+++ b/.github/workflows/aip-npm-release.yaml
@@ -48,7 +48,7 @@ jobs:
       # perform the OIDC handshake. setup-node provides a current npm and
       # writes a registry-scoped .npmrc with no _authToken.
       - name: Set up pnpm
-        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
         with:
           package_json_file: api/spec/package.json
 
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 72f4d86c73..6ccdc4dbe7 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -200,7 +200,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up pnpm
-        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
         with:
           package_json_file: api/client/javascript/package.json
 
diff --git a/.github/workflows/npm-release.yaml b/.github/workflows/npm-release.yaml
index 8c3eb6ed08..affaa9ba85 100644
--- a/.github/workflows/npm-release.yaml
+++ b/.github/workflows/npm-release.yaml
@@ -47,7 +47,7 @@ jobs:
       # perform the OIDC handshake. setup-node provides a current npm and
       # writes a registry-scoped .npmrc with no _authToken.
       - name: Set up pnpm
-        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
         with:
           package_json_file: api/client/javascript/package.json