diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 85c6176b..9d8ae125 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: 'go.mod'
           cache-dependency-path: 'go.sum'
diff --git a/.github/workflows/codestat.yaml b/.github/workflows/codestat.yaml
index ed717a8f..caa3ae3d 100644
--- a/.github/workflows/codestat.yaml
+++ b/.github/workflows/codestat.yaml
@@ -21,7 +21,7 @@ jobs:
           fetch-depth: 0 # full history for authorship analysis
           persist-credentials: false
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: 'go.mod'
           cache-dependency-path: 'go.sum'
diff --git a/.github/workflows/licenses.yaml b/.github/workflows/licenses.yaml
index 46dd4797..f456218f 100644
--- a/.github/workflows/licenses.yaml
+++ b/.github/workflows/licenses.yaml
@@ -19,7 +19,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: 'go.mod'
           cache-dependency-path: 'go.sum'
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 4ab95ed3..2f9d8d63 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -18,7 +18,7 @@ jobs:
           fetch-depth: 0 # full history for llmtag authorship analysis
           persist-credentials: false
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: 'go.mod'
           cache-dependency-path: 'go.sum'
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 0e3b150a..a210382f 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -19,7 +19,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: 'go.mod'
           cache-dependency-path: 'go.sum'
@@ -41,7 +41,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: 'go.mod'
           cache-dependency-path: 'go.sum'
diff --git a/.github/workflows/vuln.yaml b/.github/workflows/vuln.yaml
index 37385ab9..0d82c671 100644
--- a/.github/workflows/vuln.yaml
+++ b/.github/workflows/vuln.yaml
@@ -19,7 +19,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: 'go.mod'
           cache-dependency-path: 'go.sum'