diff --git a/.github/workflows/CargoAudit.yml b/.github/workflows/CargoAudit.yml
index ca0571001..fe3dac977 100644
--- a/.github/workflows/CargoAudit.yml
+++ b/.github/workflows/CargoAudit.yml
@@ -17,7 +17,7 @@ jobs:
 
       # We are not using the common workflow here because it installs a bunch of tools we don't need.
       # TODO: Once the runner image is updated to include the necessary tools (without downloading), we can switch to the common workflow.
-      - uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f  # v2.0.0
+      - uses: actions-rust-lang/setup-rust-toolchain@a188e68d0fd2bd36ad51dccb2b07ba6e75105f30  # v2.0.1
         with:
           cache: false
 
diff --git a/.github/workflows/ValidatePullRequest.yml b/.github/workflows/ValidatePullRequest.yml
index 727d255b4..9a7851f56 100644
--- a/.github/workflows/ValidatePullRequest.yml
+++ b/.github/workflows/ValidatePullRequest.yml
@@ -315,7 +315,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
 
-      - uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f  # v2
+      - uses: actions-rust-lang/setup-rust-toolchain@a188e68d0fd2bd36ad51dccb2b07ba6e75105f30  # v2
         with:
           cache: 'false'
           matcher: 'false'
diff --git a/.github/workflows/dep_miri.yml b/.github/workflows/dep_miri.yml
index 6f62cfa40..af9e09914 100644
--- a/.github/workflows/dep_miri.yml
+++ b/.github/workflows/dep_miri.yml
@@ -50,7 +50,7 @@ jobs:
       # The shared setup reads /dev/kvm to report what the runner offers, which
       # a hosted one need not have. Miri wants a toolchain and two tools, so it
       # asks for those rather than everything a hypervisor job needs.
-      - uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f  # v2.0.0
+      - uses: actions-rust-lang/setup-rust-toolchain@a188e68d0fd2bd36ad51dccb2b07ba6e75105f30  # v2.0.1
         with:
           cache: "false"
           # Miri's generated sysroot manifest emits a Cargo warning.