diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 248c82f..2417bf2 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -112,7 +112,7 @@ jobs:
           run-install: true
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # 5.0.0
+        uses: pnpm/action-setup@08c4be7e2e672a47d11bd04269e27e5f3e8529cb # 6.0.0
 
       - name: Build NAPI binding
         run: pnpm exec napi build --platform --release --esm -p oxc_react_compiler_napi --package-json-path napi/package.json -o napi/dist
@@ -137,7 +137,7 @@ jobs:
           run-install: true
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # 5.0.0
+        uses: pnpm/action-setup@08c4be7e2e672a47d11bd04269e27e5f3e8529cb # 6.0.0
 
       - name: Audit dependencies
         run: pnpm audit --audit-level=high
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 7a701e2..9d4f824 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -45,7 +45,7 @@ jobs:
           run-install: true
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # 5.0.0
+        uses: pnpm/action-setup@08c4be7e2e672a47d11bd04269e27e5f3e8529cb # 6.0.0
 
       - name: Build NAPI binding
         run: pnpm exec napi build --platform --release --esm -p oxc_react_compiler_napi --package-json-path napi/package.json -o napi/dist
@@ -81,7 +81,7 @@ jobs:
           registry-url: 'https://registry.npmjs.org/'
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # 5.0.0
+        uses: pnpm/action-setup@08c4be7e2e672a47d11bd04269e27e5f3e8529cb # 6.0.0
 
       - name: Download all artifacts
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # 8.0.1