diff --git a/.github/workflows/ca-benchmark.yaml b/.github/workflows/ca-benchmark.yaml
index aeb7b6a8cb70..65facf532c61 100644
--- a/.github/workflows/ca-benchmark.yaml
+++ b/.github/workflows/ca-benchmark.yaml
@@ -27,7 +27,7 @@ jobs:
           path: base
 
       - name: Set up Go
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version-file: pr/cluster-autoscaler/go.mod
           cache-dependency-path: pr/cluster-autoscaler/go.sum
diff --git a/.github/workflows/ca-test.yaml b/.github/workflows/ca-test.yaml
index da20bec5c2f5..285da84a7d04 100644
--- a/.github/workflows/ca-test.yaml
+++ b/.github/workflows/ca-test.yaml
@@ -25,7 +25,7 @@ jobs:
           path: ${{ env.GOPATH }}/src/k8s.io/autoscaler
 
       - name: Set up Go
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: '1.25'
           cache-dependency-path: |
diff --git a/.github/workflows/verify.yaml b/.github/workflows/verify.yaml
index 9a16c2adb622..4ca5aa360752 100644
--- a/.github/workflows/verify.yaml
+++ b/.github/workflows/verify.yaml
@@ -21,7 +21,7 @@ jobs:
           path: ${{ env.GOPATH }}/src/k8s.io/autoscaler
 
       - name: Set up Go
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: '1.25'
           cache-dependency-path: |
diff --git a/.github/workflows/vpa-golangci-lint.yaml b/.github/workflows/vpa-golangci-lint.yaml
index 6b29c6d1feb8..0fe221d76488 100644
--- a/.github/workflows/vpa-golangci-lint.yaml
+++ b/.github/workflows/vpa-golangci-lint.yaml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           path: ${{ env.GOPATH }}/src/k8s.io/autoscaler
-      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version-file: '${{ env.GOPATH}}/src/k8s.io/autoscaler/vertical-pod-autoscaler/go.mod'
           cache-dependency-path: |
diff --git a/.github/workflows/vpa-test.yaml b/.github/workflows/vpa-test.yaml
index 12aef57cd1f7..af71217f1838 100644
--- a/.github/workflows/vpa-test.yaml
+++ b/.github/workflows/vpa-test.yaml
@@ -27,7 +27,7 @@ jobs:
           path: ${{ env.GOPATH }}/src/k8s.io/autoscaler
 
       - name: Set up Go
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version-file: '${{ env.GOPATH}}/src/k8s.io/autoscaler/vertical-pod-autoscaler/go.mod'
           cache-dependency-path: |
diff --git a/.github/workflows/vpa-verify.yaml b/.github/workflows/vpa-verify.yaml
index 7284c217f19c..6eddc724529d 100644
--- a/.github/workflows/vpa-verify.yaml
+++ b/.github/workflows/vpa-verify.yaml
@@ -27,7 +27,7 @@ jobs:
           path: ${{ env.GOPATH }}/src/k8s.io/autoscaler
 
       - name: Set up Go
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version-file: '${{ env.GOPATH}}/src/k8s.io/autoscaler/vertical-pod-autoscaler/go.mod'
           cache-dependency-path: |