diff --git a/.github/workflows/code-scanning.yml b/.github/workflows/code-scanning.yml
index 26d61a2faa..ec24494e9e 100644
--- a/.github/workflows/code-scanning.yml
+++ b/.github/workflows/code-scanning.yml
@@ -80,7 +80,7 @@ jobs:
 
       - name: Set up Node.js (for JavaScript CodeQL)
         if: matrix.language == 'javascript'
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
           node-version-file: ui/package.json
           cache: "npm"