diff --git a/.github/workflows/publish-extensions.yml b/.github/workflows/publish-extensions.yml
index 82b2e0df2..1c07ce6df 100644
--- a/.github/workflows/publish-extensions.yml
+++ b/.github/workflows/publish-extensions.yml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4.0.2
+      - uses: actions/setup-node@v4.0.3
         with:
           node-version: "18.x"
       - uses: oven-sh/setup-bun@v2
@@ -93,7 +93,7 @@ jobs:
     if: ${{ !github.event.inputs.extensions }} # only run on full runs
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4.0.2
+      - uses: actions/setup-node@v4.0.3
         with:
           node-version: "18.x"
       - run: npm install
diff --git a/.github/workflows/publish-once.yml b/.github/workflows/publish-once.yml
index 7f7d8d87b..0eda8c39f 100644
--- a/.github/workflows/publish-once.yml
+++ b/.github/workflows/publish-once.yml
@@ -19,7 +19,7 @@ jobs:
     name: node publish-extensions
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-node@v4.0.2
+      - uses: actions/setup-node@v4.0.3
         with:
           node-version: "20.x"
       - name: Download extension file
diff --git a/.github/workflows/validate-pr.yml b/.github/workflows/validate-pr.yml
index 5af9bad35..9221e5ac8 100644
--- a/.github/workflows/validate-pr.yml
+++ b/.github/workflows/validate-pr.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4.0.2
+      - uses: actions/setup-node@v4.0.3
         with:
           node-version: "18.x"
       - uses: oven-sh/setup-bun@v2