diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 3ca1e46ddb0..99b9f4eff93 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -17,7 +17,7 @@ jobs:
       security-events: write
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
-    - uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34  # v5.3.0
+    - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b  # v5.4.0
       with:
         go-version-file: 'go.mod'
     - uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841  # v3.28.13
diff --git a/.github/workflows/mirror_demos.yaml b/.github/workflows/mirror_demos.yaml
index 58b02b03bda..5b340cd85cd 100644
--- a/.github/workflows/mirror_demos.yaml
+++ b/.github/workflows/mirror_demos.yaml
@@ -26,7 +26,7 @@ jobs:
         username: ${{ secrets.QUAY_IO_USER }}
         password: ${{ secrets.QUAY_IO_PASSWORD }}
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
-    - uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34  # v5.3.0
+    - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b  # v5.4.0
       with:
         go-version-file: 'go.mod'
     - name: install regbot
diff --git a/.github/workflows/mirror_deps.yaml b/.github/workflows/mirror_deps.yaml
index 0958b79e3fe..2fa4acf0593 100644
--- a/.github/workflows/mirror_deps.yaml
+++ b/.github/workflows/mirror_deps.yaml
@@ -26,7 +26,7 @@ jobs:
         username: ${{ secrets.QUAY_IO_USER }}
         password: ${{ secrets.QUAY_IO_PASSWORD }}
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
-    - uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34  # v5.3.0
+    - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b  # v5.4.0
       with:
         go-version-file: 'go.mod'
     - name: install regbot
diff --git a/.github/workflows/mirror_releases.yaml b/.github/workflows/mirror_releases.yaml
index f36bdada9a1..e1b5973c473 100644
--- a/.github/workflows/mirror_releases.yaml
+++ b/.github/workflows/mirror_releases.yaml
@@ -27,7 +27,7 @@ jobs:
         username: ${{ secrets.QUAY_IO_USER }}
         password: ${{ secrets.QUAY_IO_PASSWORD }}
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
-    - uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34  # v5.3.0
+    - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b  # v5.4.0
       with:
         go-version-file: 'go.mod'
     - name: install regbot