diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index bc3286cab..7972c6c57 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -28,7 +28,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Node.js and pnpm
-        uses: jdx/mise-action@82a612c5ab8bcda7cc5db6b7e81a8e7584c3dc6e  # v5
+        uses: jdx/mise-action@82a612c5ab8bcda7cc5db6b7e81a8e7584c3dc6e  # v5.2.3
         with:
           # Versions come from .nvmrc and package.json, not mise.toml.
           cache_key: "{{default}}-${{ hashFiles('.nvmrc', 'package.json') }}"
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 960427628..cf64ee37e 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -516,7 +516,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Node.js and pnpm
-        uses: jdx/mise-action@82a612c5ab8bcda7cc5db6b7e81a8e7584c3dc6e  # v5
+        uses: jdx/mise-action@82a612c5ab8bcda7cc5db6b7e81a8e7584c3dc6e  # v5.2.3
         with:
           # Versions come from .nvmrc and package.json, not mise.toml.
           cache_key: "{{default}}-${{ hashFiles('.nvmrc', 'package.json') }}"
@@ -644,7 +644,7 @@ jobs:
         run: composer install --no-interaction --no-progress --prefer-dist
 
       - name: Set up Node.js and pnpm
-        uses: jdx/mise-action@82a612c5ab8bcda7cc5db6b7e81a8e7584c3dc6e  # v5
+        uses: jdx/mise-action@82a612c5ab8bcda7cc5db6b7e81a8e7584c3dc6e  # v5.2.3
         with:
           # Versions come from .nvmrc and package.json, not mise.toml.
           cache_key: "{{default}}-${{ hashFiles('.nvmrc', 'package.json') }}"