diff --git a/.github/workflows/release-website.yml b/.github/workflows/release-website.yml
index a345f5a..4731439 100644
--- a/.github/workflows/release-website.yml
+++ b/.github/workflows/release-website.yml
@@ -48,7 +48,7 @@ jobs:
         with:
           version: ${{ github.ref_name }}
 
-      - uses: pnpm/setup@84cb39b217b10273981911c288cd62326dc7c6d2 # v2
+      - uses: pnpm/setup@a0881977cd8ea73b1ed212236c99ca10dcc80cf4 # v3.1.1
         with:
           # The version comes from website/package.json's packageManager field,
           # so local development and this job cannot drift apart. There is no
diff --git a/.github/workflows/website.yml b/.github/workflows/website.yml
index d9855cd..bbf0b56 100644
--- a/.github/workflows/website.yml
+++ b/.github/workflows/website.yml
@@ -22,7 +22,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: pnpm/setup@84cb39b217b10273981911c288cd62326dc7c6d2 # v2
+      - uses: pnpm/setup@a0881977cd8ea73b1ed212236c99ca10dcc80cf4 # v3.1.1
         with:
           # Reads the pnpm version from the site's own package.json; the
           # repository root has none.