diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml
index 4dfdc6ae8..788761a02 100644
--- a/.github/workflows/deploy-docs.yml
+++ b/.github/workflows/deploy-docs.yml
@@ -59,7 +59,7 @@ jobs:
         working-directory: python
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4
+        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v4
         with:
           # Pinned to 10.21.0 — 10.22+ promotes ignored build scripts to a
           # fatal error under --frozen-lockfile in CI, which breaks the
diff --git a/.github/workflows/docs-ci.yml b/.github/workflows/docs-ci.yml
index 9d184f020..251c5afc3 100644
--- a/.github/workflows/docs-ci.yml
+++ b/.github/workflows/docs-ci.yml
@@ -48,7 +48,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
+      - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
         with:
           version: 10.12.1
 
diff --git a/.github/workflows/javascript-ci.yml b/.github/workflows/javascript-ci.yml
index 8780a46fc..667c92706 100644
--- a/.github/workflows/javascript-ci.yml
+++ b/.github/workflows/javascript-ci.yml
@@ -48,7 +48,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
+      - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
         with:
           version: 10.22.0
 
diff --git a/.github/workflows/javascript-publish.yml b/.github/workflows/javascript-publish.yml
index 791f5e179..28ff4e02b 100644
--- a/.github/workflows/javascript-publish.yml
+++ b/.github/workflows/javascript-publish.yml
@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4
+        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v4
         with:
           version: 10.12.1