diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index db7c0288eda..02d2db93a31 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -21,6 +21,6 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
       - name: Install gh-aw extension
-        uses: github/gh-aw/actions/setup-cli@v0.49.4
+        uses: github/gh-aw/actions/setup-cli@245d16844b16f61042aebf5931af62a750b202fc # v0.67.0
         with:
           version: v0.49.3
diff --git a/.github/workflows/linear-triage.lock.yml b/.github/workflows/linear-triage.lock.yml
index c60b3f27732..f8f8266e56b 100644
--- a/.github/workflows/linear-triage.lock.yml
+++ b/.github/workflows/linear-triage.lock.yml
@@ -52,7 +52,7 @@ jobs:
       secret_verification_result: ${{ steps.validate-secret.outputs.verification_result }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@88319be75ab1adc60640307a10e5cf04b3deff1e # v0.51.5
+        uses: github/gh-aw/actions/setup@245d16844b16f61042aebf5931af62a750b202fc # v0.67.0
         with:
           destination: /opt/gh-aw/actions
       - name: Generate agentic run info
@@ -259,7 +259,7 @@ jobs:
       output_types: ${{ steps.collect_output.outputs.output_types }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@88319be75ab1adc60640307a10e5cf04b3deff1e # v0.51.5
+        uses: github/gh-aw/actions/setup@245d16844b16f61042aebf5931af62a750b202fc # v0.67.0
         with:
           destination: /opt/gh-aw/actions
       - name: Checkout repository
@@ -965,7 +965,7 @@ jobs:
       total_count: ${{ steps.missing_tool.outputs.total_count }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@88319be75ab1adc60640307a10e5cf04b3deff1e # v0.51.5
+        uses: github/gh-aw/actions/setup@245d16844b16f61042aebf5931af62a750b202fc # v0.67.0
         with:
           destination: /opt/gh-aw/actions
       - name: Download agent output artifact
@@ -1066,7 +1066,7 @@ jobs:
       process_safe_outputs_temporary_id_map: ${{ steps.process_safe_outputs.outputs.temporary_id_map }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@88319be75ab1adc60640307a10e5cf04b3deff1e # v0.51.5
+        uses: github/gh-aw/actions/setup@245d16844b16f61042aebf5931af62a750b202fc # v0.67.0
         with:
           destination: /opt/gh-aw/actions
       - name: Download agent output artifact
@@ -1113,7 +1113,7 @@ jobs:
       GH_AW_WORKFLOW_ID_SANITIZED: lineartriage
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@88319be75ab1adc60640307a10e5cf04b3deff1e # v0.51.5
+        uses: github/gh-aw/actions/setup@245d16844b16f61042aebf5931af62a750b202fc # v0.67.0
         with:
           destination: /opt/gh-aw/actions
       - name: Download cache-memory artifact (default)