diff --git a/.github/workflows/conformance.yml b/.github/workflows/conformance.yml
index 119e661..4050eea 100644
--- a/.github/workflows/conformance.yml
+++ b/.github/workflows/conformance.yml
@@ -34,7 +34,7 @@ jobs:
           cache: npm
           cache-dependency-path: ddot.it-syntax-tools/package-lock.json
 
-      - uses: ruby/setup-ruby@89f90524b88a01fe6e0b732220432cc6142926af # v1.313.0
+      - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
         with:
           ruby-version: '3.3'
           bundler-cache: false
diff --git a/.github/workflows/publish-rubygems.yml b/.github/workflows/publish-rubygems.yml
index 14594b6..055b196 100644
--- a/.github/workflows/publish-rubygems.yml
+++ b/.github/workflows/publish-rubygems.yml
@@ -41,7 +41,7 @@ jobs:
           repository: Calpano/ddot.it
           path: ddot.it
 
-      - uses: ruby/setup-ruby@89f90524b88a01fe6e0b732220432cc6142926af # v1.313.0
+      - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
         with:
           ruby-version: '3.3'