diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c179790..cfe44bd 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -44,7 +44,7 @@ jobs:
           echo "OK: $fields entries tagged, $(echo "$used" | wc -l) topic ids used, all known"
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@651ff0d62c5c79bed6d53ec518387aae20e72c1a  # v1.329.0
+        uses: ruby/setup-ruby@824c0e29fdfc7d689c191c27acc969d2d04b7dd8  # v1.331.0
         with:
           ruby-version: "3.3"
           bundler-cache: true
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index ab9630a..b450837 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -23,7 +23,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@651ff0d62c5c79bed6d53ec518387aae20e72c1a  # v1.329.0
+        uses: ruby/setup-ruby@824c0e29fdfc7d689c191c27acc969d2d04b7dd8  # v1.331.0
         with:
           ruby-version: "3.3"
           bundler-cache: true
diff --git a/.github/workflows/link-check.yml b/.github/workflows/link-check.yml
index 32cfc4f..5ca515c 100644
--- a/.github/workflows/link-check.yml
+++ b/.github/workflows/link-check.yml
@@ -27,7 +27,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@651ff0d62c5c79bed6d53ec518387aae20e72c1a  # v1.329.0
+        uses: ruby/setup-ruby@824c0e29fdfc7d689c191c27acc969d2d04b7dd8  # v1.331.0
         with:
           ruby-version: "3.3"
           bundler-cache: true
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 0fc2fb0..62cb3e5 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -33,7 +33,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@651ff0d62c5c79bed6d53ec518387aae20e72c1a  # v1.329.0
+        uses: ruby/setup-ruby@824c0e29fdfc7d689c191c27acc969d2d04b7dd8  # v1.331.0
         with:
           ruby-version: "3.3"
           bundler-cache: true  # bundler-audit is locked in Gemfile.lock (group :audit)