diff --git a/.github/workflows/ingest.yml b/.github/workflows/ingest.yml
index dc63535a..0a031c54 100644
--- a/.github/workflows/ingest.yml
+++ b/.github/workflows/ingest.yml
@@ -32,7 +32,7 @@ jobs:
           echo "Latest updated branch: $BRANCH_NAME"
           git checkout $BRANCH_NAME
           echo "latest-branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v6.4.0
         with:
           node-version: 24
           cache: npm
diff --git a/.github/workflows/llm-evals.yml b/.github/workflows/llm-evals.yml
index eebde904..2763c6d7 100644
--- a/.github/workflows/llm-evals.yml
+++ b/.github/workflows/llm-evals.yml
@@ -37,7 +37,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v6.4.0
         if: ${{ env.CAN_RUN_EVALS == 'true' }}
         with:
           node-version: 24
diff --git a/.github/workflows/package-publish.yml b/.github/workflows/package-publish.yml
index 3563c52f..0c1dfc0f 100644
--- a/.github/workflows/package-publish.yml
+++ b/.github/workflows/package-publish.yml
@@ -31,7 +31,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v6.4.0
         with:
           node-version: 24
           registry-url: https://registry.npmjs.org
diff --git a/.github/workflows/pages-deploy.yml b/.github/workflows/pages-deploy.yml
index 752583c9..1271af2a 100644
--- a/.github/workflows/pages-deploy.yml
+++ b/.github/workflows/pages-deploy.yml
@@ -33,7 +33,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v6.4.0
         with:
           node-version: 24
           cache: npm
diff --git a/.github/workflows/pages-preview.yml b/.github/workflows/pages-preview.yml
index 325111a7..7e9bfb8b 100644
--- a/.github/workflows/pages-preview.yml
+++ b/.github/workflows/pages-preview.yml
@@ -40,7 +40,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v6.4.0
         with:
           node-version: 24
           cache: npm
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index b12f6014..97d51088 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v6.4.0
         with:
           node-version: 24
           cache: npm