diff --git a/.github/workflows/deploy-web.yml b/.github/workflows/deploy-web.yml
index 2f195c21..b97d95fe 100644
--- a/.github/workflows/deploy-web.yml
+++ b/.github/workflows/deploy-web.yml
@@ -61,7 +61,7 @@ jobs:
         # No `version:` here — `packageManager: pnpm@9.12.0` in root
         # package.json is the source of truth. action-setup errors out
         # if you specify both.
-        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
+        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
 
       - name: Setup Node.js
         if: steps.creds.outputs.ready == 'true'
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index c997094f..4a3abbbe 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -133,7 +133,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6
       - name: Setup pnpm
-        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
+        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
       - name: Setup Node.js
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with: