diff --git a/.github/actions/pre-commit-setup/action.yml b/.github/actions/pre-commit-setup/action.yml
index 8d4e68f..d4d648a 100644
--- a/.github/actions/pre-commit-setup/action.yml
+++ b/.github/actions/pre-commit-setup/action.yml
@@ -17,7 +17,7 @@ runs:
       restore-keys: |
         ${{ runner.os }}-${{ runner.arch }}-prek-
   - name: Setup Python
-    uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405   # v6.2.0
+    uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1   # v6.3.0
     with:
       python-version: '3.14'
   - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39   # v8.2.0
diff --git a/.github/workflows/setup.yml b/.github/workflows/setup.yml
index c36bda7..a84dfc5 100644
--- a/.github/workflows/setup.yml
+++ b/.github/workflows/setup.yml
@@ -17,7 +17,7 @@ jobs:
       with:
         persist-credentials: false
     - name: Setup Python
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
       with:
         python-version: '3.14'
     - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0