diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4ba7db14..9298b52f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -58,7 +58,7 @@ jobs:
         run: sudo apt-get update && sudo apt-get install -y libmariadb-dev pkg-config
 
       - name: Set up Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -97,7 +97,7 @@ jobs:
         run: sudo apt-get update && sudo apt-get install -y libmariadb-dev pkg-config
 
       - name: Set up Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.12"
 
@@ -123,7 +123,7 @@ jobs:
         run: sudo apt-get update && sudo apt-get install -y libmariadb-dev pkg-config
 
       - name: Set up Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.12"
 
@@ -151,7 +151,7 @@ jobs:
         run: sudo apt-get update && sudo apt-get install -y libmariadb-dev pkg-config
 
       - name: Set up Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.12"
 
@@ -217,7 +217,7 @@ jobs:
 
       - name: Set up Python
         if: steps.sonar_token.outputs.present == 'true'
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.12"
 
diff --git a/.github/workflows/operator-gated-reopen.yml b/.github/workflows/operator-gated-reopen.yml
index 0d86e575..2dfc1554 100644
--- a/.github/workflows/operator-gated-reopen.yml
+++ b/.github/workflows/operator-gated-reopen.yml
@@ -34,7 +34,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Python
-        uses: actions/setup-python@a309ff8b3a37ed9102738c8e3c5c0c03e8e2a2b0 # v6.2.0
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: "3.13"
 
diff --git a/.github/workflows/rust-ci.yml b/.github/workflows/rust-ci.yml
index 5bb0a670..fa0aac55 100644
--- a/.github/workflows/rust-ci.yml
+++ b/.github/workflows/rust-ci.yml
@@ -48,7 +48,7 @@ jobs:
       # PyO3 needs a Python interpreter visible at link time; setup-python
       # exports PYO3_PYTHON-compatible env via PATH so cargo builds find it.
       - name: Set up Python (for PyO3 link)
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.12"
 
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index e29652a5..2972ec64 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -49,7 +49,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.12"