diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 871092765fb..8b0cd048f85 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -918,7 +918,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
+        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
         with:
           ruby-version: ${{ matrix.ruby-version }}
           # Old bundler used the internal constant of Pathname, that was not private due to a typo.
@@ -1021,7 +1021,7 @@ jobs:
           java-version: 8
           cache: "gradle"
 
-      - uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
+      - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
         with:
           ruby-version: "4.0"
           bundler-cache: true
diff --git a/.github/workflows/release_ruby.yml b/.github/workflows/release_ruby.yml
index 3b08146fd5c..e1d31e054f9 100644
--- a/.github/workflows/release_ruby.yml
+++ b/.github/workflows/release_ruby.yml
@@ -40,7 +40,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Ruby
-        uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
+        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
         with:
           bundler-cache: false
           ruby-version: "4.0"
diff --git a/.github/workflows/sca.yml b/.github/workflows/sca.yml
index 2153524c9f8..bf4713075a5 100644
--- a/.github/workflows/sca.yml
+++ b/.github/workflows/sca.yml
@@ -399,7 +399,7 @@ jobs:
           sudo apt-get install -y --no-install-recommends g++ $BUILD_DEPS cppcheck
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
+        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
         with:
           ruby-version: "2.7"
           bundler-cache: true