diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 36b838ac..0f893ff3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -153,7 +153,7 @@ jobs:
 
       - name: Determine version (NBGV)
         id: nbgv
-        uses: dotnet/nbgv@a776da7e5cb9880ff2cd046e8148564a462de00e # node24 (unreleased past v0.5.1; pin SHA until v0.5.2 ships)
+        uses: dotnet/nbgv@3631c36b705040f4e025c3afab07bde0f71daba5 # node24 (unreleased past v0.5.1; pin SHA until v0.5.2 ships)
         with:
           setAllVars: true
 
diff --git a/.github/workflows/pr-validation.yml b/.github/workflows/pr-validation.yml
index a55620e0..578aa688 100644
--- a/.github/workflows/pr-validation.yml
+++ b/.github/workflows/pr-validation.yml
@@ -37,7 +37,7 @@ jobs:
 
       - name: Determine version (NBGV)
         id: nbgv
-        uses: dotnet/nbgv@a776da7e5cb9880ff2cd046e8148564a462de00e # node24 (unreleased past v0.5.1; pin SHA until v0.5.2 ships)
+        uses: dotnet/nbgv@3631c36b705040f4e025c3afab07bde0f71daba5 # node24 (unreleased past v0.5.1; pin SHA until v0.5.2 ships)
         with:
           setAllVars: true