diff --git a/.github/workflows/layout-shots.yml b/.github/workflows/layout-shots.yml
index 3427ab55..d9aae2a0 100644
--- a/.github/workflows/layout-shots.yml
+++ b/.github/workflows/layout-shots.yml
@@ -47,7 +47,7 @@ jobs:
           cache: gradle
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
+        uses: gradle/actions/setup-gradle@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - name: Test CA and server certificate for 10.0.2.2
         run: |
diff --git a/.github/workflows/play-listing.yml b/.github/workflows/play-listing.yml
index e8524f9b..c2f9e690 100644
--- a/.github/workflows/play-listing.yml
+++ b/.github/workflows/play-listing.yml
@@ -21,7 +21,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: ruby/setup-ruby@26e5b7d197ebf60545ee9667bcbace0be11ccaec # v1.334.0
+      - uses: ruby/setup-ruby@de492cf36cbab201753d720ce4f4e336cd688c94 # v1.336.0
         with:
           ruby-version: '3.3'
           bundler-cache: true
diff --git a/.github/workflows/play-promote.yml b/.github/workflows/play-promote.yml
index c4ce77a1..99a19a40 100644
--- a/.github/workflows/play-promote.yml
+++ b/.github/workflows/play-promote.yml
@@ -43,7 +43,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: ruby/setup-ruby@26e5b7d197ebf60545ee9667bcbace0be11ccaec # v1.334.0
+      - uses: ruby/setup-ruby@de492cf36cbab201753d720ce4f4e336cd688c94 # v1.336.0
         with:
           ruby-version: '3.3'
           bundler-cache: true
diff --git a/.github/workflows/play-upload.yml b/.github/workflows/play-upload.yml
index 484f435c..47e1b896 100644
--- a/.github/workflows/play-upload.yml
+++ b/.github/workflows/play-upload.yml
@@ -33,7 +33,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: ruby/setup-ruby@26e5b7d197ebf60545ee9667bcbace0be11ccaec # v1.334.0
+      - uses: ruby/setup-ruby@de492cf36cbab201753d720ce4f4e336cd688c94 # v1.336.0
         with:
           ruby-version: '3.3'
           bundler-cache: true
diff --git a/.github/workflows/play-videos.yml b/.github/workflows/play-videos.yml
index a2a6d2e2..5c687890 100644
--- a/.github/workflows/play-videos.yml
+++ b/.github/workflows/play-videos.yml
@@ -43,7 +43,7 @@ jobs:
           cache: gradle
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
+        uses: gradle/actions/setup-gradle@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - name: Test CA and server certificate for 10.0.2.2
         run: |
diff --git a/.github/workflows/pr-check.yml b/.github/workflows/pr-check.yml
index 1f44c99d..b5ef639d 100644
--- a/.github/workflows/pr-check.yml
+++ b/.github/workflows/pr-check.yml
@@ -22,7 +22,7 @@ jobs:
           cache: gradle
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
+        uses: gradle/actions/setup-gradle@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - name: Run unit tests
         run: ./gradlew test --continue
diff --git a/.github/workflows/release-smoke.yml b/.github/workflows/release-smoke.yml
index 1682fce8..298fba17 100644
--- a/.github/workflows/release-smoke.yml
+++ b/.github/workflows/release-smoke.yml
@@ -30,7 +30,7 @@ jobs:
           cache: gradle
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
+        uses: gradle/actions/setup-gradle@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - name: Build release APK with a throwaway key
         run: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 36d6acc6..83adc286 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -63,7 +63,7 @@ jobs:
           cache: gradle
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
+        uses: gradle/actions/setup-gradle@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - name: Run unit tests
         run: ./gradlew test --continue
@@ -115,7 +115,7 @@ jobs:
           cache: gradle
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
+        uses: gradle/actions/setup-gradle@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - name: Determine version bump
         id: bump
@@ -315,7 +315,7 @@ jobs:
       # Production happens only on request through play-promote.yml.
       - name: Setup Ruby (fastlane)
         if: steps.check_tag.outputs.exists == 'false' && env.PLAY_CONFIGURED == 'true'
-        uses: ruby/setup-ruby@26e5b7d197ebf60545ee9667bcbace0be11ccaec # v1.334.0
+        uses: ruby/setup-ruby@de492cf36cbab201753d720ce4f4e336cd688c94 # v1.336.0
         with:
           ruby-version: '3.3'
           bundler-cache: true
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 953effa7..dafc19fd 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -24,7 +24,7 @@ jobs:
           cache: gradle
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
+        uses: gradle/actions/setup-gradle@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - name: Run lint
         run: ./gradlew lintRelease
@@ -43,7 +43,7 @@ jobs:
           cache: gradle
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
+        uses: gradle/actions/setup-gradle@8da46b539cd8fe6ab27ca75128919a18d757604c # v6.4.1
 
       - name: Check for dependency vulnerabilities
         run: ./gradlew dependencies --configuration releaseRuntimeClasspath | tee deps.txt