diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 3e1634d..51b246b 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -28,7 +28,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # 2.37.1
+      - uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
         with:
           coverage: "none"
           php-version: ${{ matrix.php }}
@@ -101,7 +101,7 @@ jobs:
           git add -A
           git commit -q -m head
 
-      - uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # 2.37.1
+      - uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
         with:
           coverage: 'none'
           php-version: 8.5
diff --git a/action.yml b/action.yml
index a930881..5c7724e 100644
--- a/action.yml
+++ b/action.yml
@@ -131,7 +131,7 @@ runs:
 
     - name: Setup PHP
       if: steps.pr.outputs.number && steps.preflight.outputs.should-run == 'true'
-      uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # 2.37.1
+      uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
       with:
         coverage: 'none'
         php-version: 8.5