diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 82295ee..2b1cab0 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -20,7 +20,7 @@ jobs:
       uses: astral-sh/setup-uv@eb1897b8dc4b5d5bfe39a428a8f2304605e0983c # v7
 
     - name: Setup Python
-      uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
+      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
       with:
         python-version-file: ".python-version"
 
diff --git a/template/{% if repository_provider == 'github' %}.github{% endif %}/actions/setup-env/action.yaml b/template/{% if repository_provider == 'github' %}.github{% endif %}/actions/setup-env/action.yaml
index d32d6d5..1a36d86 100644
--- a/template/{% if repository_provider == 'github' %}.github{% endif %}/actions/setup-env/action.yaml	
+++ b/template/{% if repository_provider == 'github' %}.github{% endif %}/actions/setup-env/action.yaml	
@@ -15,7 +15,7 @@ runs:
       uses: astral-sh/setup-uv@eb1897b8dc4b5d5bfe39a428a8f2304605e0983c # v7
 
     - name: Setup Python
-      uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
+      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
       with:
         # one of these two
         python-version: ${{ inputs.python-version }}