diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fcd06ab8..ea51dc90 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -110,7 +110,7 @@ jobs:
           cache-dependency-path: scripts/usb-bridge-recipe/requirements.txt
 
       - name: Set up Node.js for browser localization tests
-        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: '24'
 
diff --git a/.github/workflows/windows-build.yml b/.github/workflows/windows-build.yml
index 34db7ea5..da2fa86c 100644
--- a/.github/workflows/windows-build.yml
+++ b/.github/workflows/windows-build.yml
@@ -61,7 +61,7 @@ jobs:
           cache-dependency-path: scripts/usb-bridge-recipe/requirements.txt
 
       - name: Set up Node.js for browser localization tests
-        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: '24'