diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ab8a937..651e9fe 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,7 +35,7 @@ jobs:
           if ($errors) { $errors | ForEach-Object { Write-Host $_ }; exit 1 }
           Write-Host 'scripts/install.ps1 parses cleanly'
 
-      - uses: actions/setup-dotnet@v4
+      - uses: actions/setup-dotnet@v6
         with:
           dotnet-version: '8.0.x'
 
@@ -73,7 +73,7 @@ jobs:
             } >> "$GITHUB_STEP_SUMMARY"
           fi
 
-      - uses: actions/setup-dotnet@v4
+      - uses: actions/setup-dotnet@v6
         if: steps.gate.outputs.enabled == 'true'
         with:
           dotnet-version: '8.0.x'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 82641f9..dbeaf9c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -72,7 +72,7 @@ jobs:
             echo "No VAM_ASSEMBLY_URL secret: drafting notes only. Attach the binary with \`./scripts/release.sh ${{ steps.version.outputs.tag }}\`." >> "$GITHUB_STEP_SUMMARY"
           fi
 
-      - uses: actions/setup-dotnet@v4
+      - uses: actions/setup-dotnet@v6
         if: steps.gate.outputs.enabled == 'true'
         with:
           dotnet-version: '8.0.x'