diff --git a/.github/workflows/freeze-for-pr.yml b/.github/workflows/freeze-for-pr.yml
index 63be2c2e2..db49e8cad 100644
--- a/.github/workflows/freeze-for-pr.yml
+++ b/.github/workflows/freeze-for-pr.yml
@@ -20,7 +20,7 @@ jobs:
           submodules: "true"
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
         with:
           python-version: "3.9"
 
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index d89505e64..e3c24cfc4 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -25,7 +25,7 @@ jobs:
           submodules: "true"
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
         with:
           python-version: "3.9"
 
diff --git a/.github/workflows/pr-docs.yml b/.github/workflows/pr-docs.yml
index 4ad012eb1..1c24998cc 100644
--- a/.github/workflows/pr-docs.yml
+++ b/.github/workflows/pr-docs.yml
@@ -30,7 +30,7 @@ jobs:
 
       - name: Set up Python 3.9
         if: github.event.action != 'closed'
-        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
         with:
           python-version: "3.9"
 
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 6d527dc75..c98bc19ed 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -19,7 +19,7 @@ jobs:
           submodules: "true"
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
         with:
           python-version: "3.9"
 
diff --git a/.github/workflows/py-test.yml b/.github/workflows/py-test.yml
index 09e662986..e8eea7d42 100644
--- a/.github/workflows/py-test.yml
+++ b/.github/workflows/py-test.yml
@@ -31,7 +31,7 @@ jobs:
           submodules: "true"
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -56,7 +56,7 @@ jobs:
           submodules: "true"
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
         with:
           python-version: "3.9"
 
diff --git a/.github/workflows/reformat.yml b/.github/workflows/reformat.yml
index ea6b02a0b..634e60942 100644
--- a/.github/workflows/reformat.yml
+++ b/.github/workflows/reformat.yml
@@ -19,7 +19,7 @@ jobs:
           submodules: "true"
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
         with:
           python-version: "3.9"
 
diff --git a/.github/workflows/release-docs.yml b/.github/workflows/release-docs.yml
index 61044c531..0f0f515b0 100644
--- a/.github/workflows/release-docs.yml
+++ b/.github/workflows/release-docs.yml
@@ -14,7 +14,7 @@ jobs:
           submodules: "true"
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
         with:
           python-version: "3.9"
 
diff --git a/.github/workflows/resync-piped.yml b/.github/workflows/resync-piped.yml
index 393879db3..38d6eeac7 100644
--- a/.github/workflows/resync-piped.yml
+++ b/.github/workflows/resync-piped.yml
@@ -20,7 +20,7 @@ jobs:
           submodules: "true"
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
         with:
           python-version: "3.9"
 
diff --git a/.github/workflows/type-check.yml b/.github/workflows/type-check.yml
index 319832ffb..1abfd556b 100644
--- a/.github/workflows/type-check.yml
+++ b/.github/workflows/type-check.yml
@@ -25,7 +25,7 @@ jobs:
           submodules: "true"
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
         with:
           python-version: "3.9"
 
diff --git a/.github/workflows/update-licence.yml b/.github/workflows/update-licence.yml
index 14ee8c2b3..cc8dbf2d0 100644
--- a/.github/workflows/update-licence.yml
+++ b/.github/workflows/update-licence.yml
@@ -15,7 +15,7 @@ jobs:
           submodules: "true"
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
         with:
           python-version: "3.9"
 
diff --git a/.github/workflows/upgrade-locks.yml b/.github/workflows/upgrade-locks.yml
index 94515bf97..a261324a9 100644
--- a/.github/workflows/upgrade-locks.yml
+++ b/.github/workflows/upgrade-locks.yml
@@ -15,7 +15,7 @@ jobs:
           submodules: "true"
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
         with:
           python-version: "3.9"
 
diff --git a/.github/workflows/verify-locks.yml b/.github/workflows/verify-locks.yml
index b2794d14a..848fada87 100644
--- a/.github/workflows/verify-locks.yml
+++ b/.github/workflows/verify-locks.yml
@@ -23,7 +23,7 @@ jobs:
           submodules: "true"
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
         with:
           python-version: "3.9"
 
diff --git a/.github/workflows/verify-types.yml b/.github/workflows/verify-types.yml
index 05990604d..64da0c632 100644
--- a/.github/workflows/verify-types.yml
+++ b/.github/workflows/verify-types.yml
@@ -25,7 +25,7 @@ jobs:
           submodules: "true"
 
       - name: Set up Python 3.9
-        uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
         with:
           python-version: "3.9"