diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index 82391ae..db649f4 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -13,7 +13,7 @@ jobs:
     - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
       with:
         node-version: '24'
-    - uses: pnpm/action-setup@v4
+    - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
     - run: pnpm install --frozen-lockfile
       shell: bash
     - run: pnpm test