diff --git a/.github/workflows/autorelease-e2e.yml b/.github/workflows/autorelease-e2e.yml
index 7be7dd0..79f0d81 100644
--- a/.github/workflows/autorelease-e2e.yml
+++ b/.github/workflows/autorelease-e2e.yml
@@ -106,7 +106,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Install pinned mise
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4
+        uses: jdx/mise-action@9149ea85001c7435d5a66bb127d6a1b6227cb0a5 # v5.0.0
         with:
           version: 2026.7.13
           sha256: ef747f4bd944d7cb4efe1832ec6cd29dfdbc217389122fa37c20d116d90c1eb6
@@ -196,7 +196,7 @@ jobs:
           repository: bigpixelrocket/mise-php
           ref: ${{ needs.preflight.outputs.mise_php_sha }}
           persist-credentials: false
-      - uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4
+      - uses: jdx/mise-action@9149ea85001c7435d5a66bb127d6a1b6227cb0a5 # v5.0.0
         with:
           github_token: ${{ github.token }}
           cache: false
diff --git a/.github/workflows/autorelease-publish.yml b/.github/workflows/autorelease-publish.yml
index a7f3051..0cd14cd 100644
--- a/.github/workflows/autorelease-publish.yml
+++ b/.github/workflows/autorelease-publish.yml
@@ -415,7 +415,7 @@ jobs:
           persist-credentials: false
       # mise installs no tools here. Without the cache it never runs a mise binary
       # another job could have saved.
-      - uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4
+      - uses: jdx/mise-action@9149ea85001c7435d5a66bb127d6a1b6227cb0a5 # v5.0.0
         with:
           github_token: ${{ github.token }}
           cache: false
@@ -672,7 +672,7 @@ jobs:
           ref: ${{ needs.release.outputs.mise_commit }}
           path: mise-php
           persist-credentials: false
-      - uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4
+      - uses: jdx/mise-action@9149ea85001c7435d5a66bb127d6a1b6227cb0a5 # v5.0.0
         with:
           github_token: ${{ github.token }}
           cache: false