diff --git a/.github/workflows/create-release-pr.yaml b/.github/workflows/create-release-pr.yaml
index 194f29f..a4c4b5f 100644
--- a/.github/workflows/create-release-pr.yaml
+++ b/.github/workflows/create-release-pr.yaml
@@ -203,7 +203,7 @@ jobs:
     env:
       architect_flags: "--organisation ${{ github.repository_owner }} --project ${{ needs.gather_facts.outputs.repo_name }}"
     steps:
-      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version: '=1.26.4'
       - name: Install architect
diff --git a/.github/workflows/create-release.yaml b/.github/workflows/create-release.yaml
index 5459c3d..a03125b 100644
--- a/.github/workflows/create-release.yaml
+++ b/.github/workflows/create-release.yaml
@@ -372,7 +372,7 @@ jobs:
           tarball_binary_path: "*/${binary}"
           smoke_test: "${binary} --version"
       - name: Set up Go ${{ env.GO_VERSION }}
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version: ${{ env.GO_VERSION }}
       - name: Checkout code
diff --git a/.github/workflows/documentation-validation.yaml b/.github/workflows/documentation-validation.yaml
index e1eacfa..35a62a9 100644
--- a/.github/workflows/documentation-validation.yaml
+++ b/.github/workflows/documentation-validation.yaml
@@ -19,7 +19,7 @@ jobs:
       GO_VERSION: 1.26.3
     steps:
       - name: Set up Go ${{ env.GO_VERSION }}
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version: ${{ env.GO_VERSION }}
       - name: Checkout code
diff --git a/.github/workflows/go-coverage.yaml b/.github/workflows/go-coverage.yaml
index 1858c8a..edecd11 100644
--- a/.github/workflows/go-coverage.yaml
+++ b/.github/workflows/go-coverage.yaml
@@ -28,7 +28,7 @@ jobs:
           # default fetch-depth is insufficent to find previous coverage notes
           fetch-depth: 10
 
-      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version: '=1.26.4'