diff --git a/.github/workflows/codeql-dotnet.yaml b/.github/workflows/codeql-dotnet.yaml
index 21b44f1a..9b7cee85 100644
--- a/.github/workflows/codeql-dotnet.yaml
+++ b/.github/workflows/codeql-dotnet.yaml
@@ -40,7 +40,7 @@ jobs:
           languages: csharp
           build-mode: manual
           tools: linked
-      - uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0
+      - uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
           dotnet-version: '8.0.x'
       - name: Build
diff --git a/.github/workflows/release-nuget.yaml b/.github/workflows/release-nuget.yaml
index 81c11f56..8d47bf0c 100644
--- a/.github/workflows/release-nuget.yaml
+++ b/.github/workflows/release-nuget.yaml
@@ -20,7 +20,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup .NET
-        uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0
+        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
           dotnet-version: 8.0.x
       - name: NuGet login (OIDC → temp API key)
diff --git a/.github/workflows/test-dotnet.yml b/.github/workflows/test-dotnet.yml
index f8945338..df93c98d 100644
--- a/.github/workflows/test-dotnet.yml
+++ b/.github/workflows/test-dotnet.yml
@@ -27,7 +27,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
-      - uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0
+      - uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
           dotnet-version: '8.0.x'
       - name: run tests