diff --git a/.github/workflows/crabbox-hydrate.yml b/.github/workflows/crabbox-hydrate.yml
index 3b0e1abdfa..babb87ae07 100644
--- a/.github/workflows/crabbox-hydrate.yml
+++ b/.github/workflows/crabbox-hydrate.yml
@@ -39,7 +39,7 @@ jobs:
         with:
           ref: ${{ inputs.ref || github.ref }}
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v6.4.0
         with:
           node-version: 22
 
diff --git a/.github/workflows/docs-code-ci.yml b/.github/workflows/docs-code-ci.yml
index 5303ef8fd5..86205c03c5 100644
--- a/.github/workflows/docs-code-ci.yml
+++ b/.github/workflows/docs-code-ci.yml
@@ -33,7 +33,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Set up Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: 24
           cache: npm
diff --git a/.github/workflows/docs-live-smoke.yml b/.github/workflows/docs-live-smoke.yml
index d2637e7baf..9aa0156c2b 100644
--- a/.github/workflows/docs-live-smoke.yml
+++ b/.github/workflows/docs-live-smoke.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: 22
 
diff --git a/.github/workflows/llms-full.yml b/.github/workflows/llms-full.yml
index a3cc8c92ec..5c16837037 100644
--- a/.github/workflows/llms-full.yml
+++ b/.github/workflows/llms-full.yml
@@ -93,7 +93,7 @@ jobs:
 
       - name: Set up Node
         if: steps.current-main.outputs.stale != 'true' && steps.live-route.outputs.available != 'false'
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: 24
           cache: npm
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index f8e20a6c56..ff80800722 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -44,7 +44,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Set up Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: 24
           cache: npm
diff --git a/.github/workflows/r2-pages.yml b/.github/workflows/r2-pages.yml
index acd57f639d..ceca05f46b 100644
--- a/.github/workflows/r2-pages.yml
+++ b/.github/workflows/r2-pages.yml
@@ -175,7 +175,7 @@ jobs:
 
       - name: Set up Node
         if: steps.artifact-scope.outputs.scope != 'none' || steps.artifact-scope.outputs.deploy_worker == '1'
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: 24
           cache: npm
diff --git a/.github/workflows/translate-finalize-reusable.yml b/.github/workflows/translate-finalize-reusable.yml
index 316b433a9a..348e29a722 100644
--- a/.github/workflows/translate-finalize-reusable.yml
+++ b/.github/workflows/translate-finalize-reusable.yml
@@ -77,7 +77,7 @@ jobs:
 
       - name: Set up Node
         if: steps.apply.outputs.changed_count != '0'
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: 24
           cache: npm
diff --git a/.github/workflows/translate-locale-reusable.yml b/.github/workflows/translate-locale-reusable.yml
index 0025698bbd..cbcd4d1efb 100644
--- a/.github/workflows/translate-locale-reusable.yml
+++ b/.github/workflows/translate-locale-reusable.yml
@@ -122,7 +122,7 @@ jobs:
 
       - name: Setup Node
         if: steps.stale.outputs.skip != 'true'
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: 22
 
@@ -376,7 +376,7 @@ jobs:
 
       - name: Set up Node for locale validation
         if: inputs.artifact_role != 'canary' && steps.apply.outputs.changed_count != '0'
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: 24
           cache: npm