diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 702fc07..bd554a2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -127,7 +127,7 @@ jobs:
       # Both SDKs, for the reason publish.yml records: the .NET 11 SDK is not on the hosted images yet,
       # and the 11.0 SDK on its own cannot produce the net10.0 app host the test project needs (MSB3030).
       - name: Install the .NET SDKs
-        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
+        uses: actions/setup-dotnet@0f4a354dd5547a28c70b7853dbd95d5b67886e73 # v6
         with:
           dotnet-version: |
             11.0.x
diff --git a/.github/workflows/mutation.yml b/.github/workflows/mutation.yml
index 8a8ad94..faafae3 100644
--- a/.github/workflows/mutation.yml
+++ b/.github/workflows/mutation.yml
@@ -120,7 +120,7 @@ jobs:
       # Both SDKs, for the reason ci.yml records: the .NET 11 SDK is not on the hosted images yet, and
       # Stryker builds the solution before it mutates anything, which includes the net10.0 leg.
       - name: Install the .NET SDKs
-        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
+        uses: actions/setup-dotnet@0f4a354dd5547a28c70b7853dbd95d5b67886e73 # v6
         with:
           dotnet-version: |
             11.0.x
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 29b29f0..1cd508b 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -147,7 +147,7 @@ jobs:
       # MSB3030 (obj/Release/net10.0/apphost not found) and the net10.0 test run has nothing to start
       # on. global.json pins no SDK version, so the newest SDK still does the building.
       - name: Install the .NET SDKs
-        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
+        uses: actions/setup-dotnet@0f4a354dd5547a28c70b7853dbd95d5b67886e73 # v6
         with:
           dotnet-version: |
             11.0.x