diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b2ae02a..51890c2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -108,7 +108,7 @@ jobs:
           git tag -a "$TAG" -m "ULC $TAG"
           git push origin "$TAG"
 
-      - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version-file: 'go.mod'
           cache: true
diff --git a/.github/workflows/schema-drift-guard.yml b/.github/workflows/schema-drift-guard.yml
index 757704d..d0e159c 100644
--- a/.github/workflows/schema-drift-guard.yml
+++ b/.github/workflows/schema-drift-guard.yml
@@ -22,7 +22,7 @@ jobs:
       - name: Schema $ref drift guard
         run: python3 tools/schema-drift-guard.py
 
-      - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version-file: 'go.mod'
           cache: true
diff --git a/.github/workflows/validator-ci.yml b/.github/workflows/validator-ci.yml
index c190333..fcd12f9 100644
--- a/.github/workflows/validator-ci.yml
+++ b/.github/workflows/validator-ci.yml
@@ -18,7 +18,7 @@ jobs:
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Set up Go
-        uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version-file: 'go.mod'
           cache: true