diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 3b1a4a23..c9d23578 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -49,7 +49,7 @@ jobs:
           path: ${{ env.WORKING_DIR }}
 
       - name: Update Go version using setup-go
-        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
+        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
         if: matrix.go != 'tip'
         with:
           # Include cache directives to allow proper caching. Without them, we
@@ -59,7 +59,7 @@ jobs:
           cache-dependency-path: '**/go.sum'
 
       - name: Install Go bootstrap compiler
-        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
+        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
         if: matrix.go == 'tip'
         with:
           # Bootstrapping go tip requires 1.22.6
@@ -123,7 +123,7 @@ jobs:
           path: ${{ env.WORKING_DIR }}
 
       - name: Update Go version using setup-go
-        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
+        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
         if: matrix.go != 'tip'
         with:
           # Include cache directives to allow proper caching. Without them, we
@@ -133,7 +133,7 @@ jobs:
           cache-dependency-path: '**/go.sum'
 
       - name: Install Go bootstrap compiler
-        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
+        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
         if: matrix.go == 'tip'
         with:
           # Bootstrapping go tip requires 1.22.6
@@ -213,7 +213,7 @@ jobs:
           path: ${{ env.WORKING_DIR }}
 
       - name: Update Go version using setup-go
-        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
+        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
         with:
           # Include cache directives to allow proper caching. Without them, we
           # get setup-go "Restore cache failed" warnings.