diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 32942a8d..39afabed 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -36,7 +36,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup tools
-        uses: jdx/mise-action@c53b9236f0b3370f31520f8b142f141256d839c6 # v3.6.0
+        uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3
       - name: Install dependencies
         run: bun install --frozen-lockfile
       - name: Run TypeScript type check
@@ -84,7 +84,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup tools
-        uses: jdx/mise-action@c53b9236f0b3370f31520f8b142f141256d839c6 # v3.6.0
+        uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3
       - name: Install dependencies
         run: bun install --frozen-lockfile
       - name: Install Playwright browsers
@@ -131,7 +131,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup tools
-        uses: jdx/mise-action@c53b9236f0b3370f31520f8b142f141256d839c6 # v3.6.0
+        uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3
       - name: Run actionlint
         if: matrix.task == 'actionlint'
         run: actionlint
@@ -153,6 +153,6 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup tools
-        uses: jdx/mise-action@c53b9236f0b3370f31520f8b142f141256d839c6 # v3.6.0
+        uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3
       - name: Run hadolint
         run: hadolint ./Dockerfile
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index db4c32a7..a27e051b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup tools
-        uses: jdx/mise-action@c53b9236f0b3370f31520f8b142f141256d839c6 # v3.6.0
+        uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3
         with:
           cache: false