diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3c73c8f..7bdd8f9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -162,7 +162,7 @@ jobs:
 
       - name: Set up Node
         if: needs.config.outputs.runtime == 'node' || needs.config.outputs.runtime == 'streamdeck'
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: .nvmrc
           cache: npm
@@ -233,7 +233,7 @@ jobs:
 
       - name: Set up Node
         if: needs.config.outputs.runtime == 'node' || needs.config.outputs.runtime == 'streamdeck'
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: .nvmrc
           cache: npm
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 53b4bbf..265d654 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -336,7 +336,7 @@ jobs:
       # -- Step 1b/1c. Toolchain and lockfile-pinned dependencies ---------
       - name: Step 1b - set up Node
         if: steps.cfg.outputs.runtime == 'node' || steps.cfg.outputs.runtime == 'streamdeck' || steps.cfg.outputs.sbom_generator == 'cyclonedx-npm'
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: .nvmrc
           cache: npm