diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 155d8e1..ec0cc85 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -75,7 +75,7 @@ jobs:
         # the SHA means this build can only ever run the exact reviewed code.
         # Dependabot (.github/dependabot.yml, github-actions ecosystem) raises a PR
         # when a newer release is published. Bump the trailing comment with the SHA.
-        uses: ruby/setup-ruby@afeafc3d1ab54a631816aba4c914a0081c12ff2f # v1.310.0
+        uses: ruby/setup-ruby@89f90524b88a01fe6e0b732220432cc6142926af # v1.313.0
         with:
           ruby-version: '3.2'
           bundler-cache: true