diff --git a/.github/workflows/react-compat.yml b/.github/workflows/react-compat.yml
index 0ecb314..ec968a3 100644
--- a/.github/workflows/react-compat.yml
+++ b/.github/workflows/react-compat.yml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '20'
           cache: 'npm'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a288d39..ccc1531 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '20'
           # NO registry-url - prevents .npmrc conflicts with OIDC
diff --git a/.github/workflows/security-audit.yml b/.github/workflows/security-audit.yml
index ce23e3a..afacb5d 100644
--- a/.github/workflows/security-audit.yml
+++ b/.github/workflows/security-audit.yml
@@ -23,7 +23,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '20'
           cache: 'npm'