diff --git a/.github/workflows/publish-extensions.yml b/.github/workflows/publish-extensions.yml
index 735c042c2..c9852921b 100644
--- a/.github/workflows/publish-extensions.yml
+++ b/.github/workflows/publish-extensions.yml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4.2.0
+      - uses: actions/setup-node@v4.3.0
         with:
           node-version: "20.x"
       - uses: oven-sh/setup-bun@v2
@@ -93,7 +93,7 @@ jobs:
     if: ${{ !github.event.inputs.extensions }} # only run on full runs
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4.2.0
+      - uses: actions/setup-node@v4.3.0
         with:
           node-version: "18.x"
       - run: npm install
diff --git a/.github/workflows/publish-once.yml b/.github/workflows/publish-once.yml
index 9baa54516..424e4080e 100644
--- a/.github/workflows/publish-once.yml
+++ b/.github/workflows/publish-once.yml
@@ -19,7 +19,7 @@ jobs:
     name: node publish-extensions
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-node@v4.2.0
+      - uses: actions/setup-node@v4.3.0
         with:
           node-version: "20.x"
       - name: Download extension file
diff --git a/.github/workflows/validate-pr.yml b/.github/workflows/validate-pr.yml
index 8e2c3194f..ac7198c2e 100644
--- a/.github/workflows/validate-pr.yml
+++ b/.github/workflows/validate-pr.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4.2.0
+      - uses: actions/setup-node@v4.3.0
         with:
           node-version: "18.x"
       - uses: oven-sh/setup-bun@v2