diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index fa804ff..af375eb 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -41,7 +41,7 @@ jobs:
         with:
           persist-credentials: 'false'
       - name: Setup .npmrc file to publish to npm
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # 6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
         with:
           node-version: '25.2.0'
           registry-url: 'https://registry.npmjs.org'
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 9852ef3..7e0d427 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -27,4 +27,4 @@ jobs:
           persist-credentials: false
 
       - name: Validate Renovate Config
-        uses: grafana/shared-workflows/actions/validate-renovate-config@051f0a1cef0e1ef9f92fbe57c65b1eec029c3904 # validate-renovate-config/v0.1.1
+        uses: grafana/shared-workflows/actions/validate-renovate-config@726f1a912f45b4807774b76a6d40cbd3fb7a12c0 # validate-renovate-config/v0.1.2
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index d0dae9f..2faa994 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -32,7 +32,7 @@ jobs:
         with:
           persist-credentials: 'false'
       - name: Set up Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # 6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
         with:
           node-version: 25.x
           package-manager-cache: false
@@ -54,7 +54,7 @@ jobs:
         with:
           persist-credentials: 'false'
       - name: Set up Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # 6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
         with:
           node-version: ${{ matrix.node }}
           package-manager-cache: false