diff --git a/.github/workflows/create_js_branch.yaml b/.github/workflows/create_js_branch.yaml
index c3b299f..1b531a8 100644
--- a/.github/workflows/create_js_branch.yaml
+++ b/.github/workflows/create_js_branch.yaml
@@ -29,7 +29,7 @@ jobs:
       # and ships npm >= 11.10.0. Without this the job runs on the runner default
       # (node 22 / npm 10.x), which fails `npm install` for callers that set
       # engine-strict=true alongside an "npm": ">=11.10.0" engines constraint.
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 24
 
diff --git a/.github/workflows/switch_js_branch.yaml b/.github/workflows/switch_js_branch.yaml
index 2d5200d..8287fa2 100644
--- a/.github/workflows/switch_js_branch.yaml
+++ b/.github/workflows/switch_js_branch.yaml
@@ -29,7 +29,7 @@ jobs:
       # and ships npm >= 11.10.0. Without this the job runs on the runner default
       # (node 22 / npm 10.x), which fails `npm install` for callers that set
       # engine-strict=true alongside an "npm": ">=11.10.0" engines constraint.
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 24