diff --git a/.github/workflows/native-release.yml b/.github/workflows/native-release.yml
index 3de7f843..4b938f94 100644
--- a/.github/workflows/native-release.yml
+++ b/.github/workflows/native-release.yml
@@ -57,7 +57,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: '22'
 
@@ -125,7 +125,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         # Node 24 ships npm 11.x which has OIDC trusted-publishing
         # support. Node 22 ships npm 10.x (no trust support) and
         # `npm install -g npm@latest` from there hits a known
diff --git a/.github/workflows/sdk-release.yml b/.github/workflows/sdk-release.yml
index e08bddb2..448de1f4 100644
--- a/.github/workflows/sdk-release.yml
+++ b/.github/workflows/sdk-release.yml
@@ -35,7 +35,7 @@ jobs:
           install: true
           cache: true
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         # Node 24 for npm 11+ (OIDC trusted-publishing support);
         # see native-release.yml for the full rationale.
         with: