diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index e5e4b89..3e907fb 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           node-version: ${{ matrix.node_version }}
       - name: npm install
-        uses: bahmutov/npm-install@0a424fea8730e1589f423ab6a7d886f047679aa9 # v1.8.35
+        uses: bahmutov/npm-install@2509f13e8485d88340a789a3f7ca11aaac47c9fc # v1.8.36
       - name: test
         run: npm test
       - name: lint
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b752c5e..0e68c36 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,7 +30,7 @@ jobs:
         run: npm i -g npm@latest
       - name: Build Package
         if: ${{ steps.release.outputs.releases_created }}
-        uses: bahmutov/npm-install@0a424fea8730e1589f423ab6a7d886f047679aa9 # v1.8.35
+        uses: bahmutov/npm-install@2509f13e8485d88340a789a3f7ca11aaac47c9fc # v1.8.36
 
       # Release Please has already incremented versions and published tags, so we just
       # need to publish all unpublished versions to NPM here