diff --git a/.github/actions/nix-setup/action.yml b/.github/actions/nix-setup/action.yml
index bd9eefa..b1169a8 100644
--- a/.github/actions/nix-setup/action.yml
+++ b/.github/actions/nix-setup/action.yml
@@ -27,7 +27,7 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: DeterminateSystems/nix-installer-action@ef8a148080ab6020fd15196c2084a2eea5ff2d25 # v22
+    - uses: DeterminateSystems/nix-installer-action@3138316df39ed29be04236d7ffc686fa525866aa # v23
 
     # Decide push vs pull-only once, off the event name and token presence, so
     # both Cachix steps share a single source of truth. `nix flake check` runs