diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index e5e4b89..46389f4 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           node-version: ${{ matrix.node_version }}
       - name: npm install
-        uses: bahmutov/npm-install@0a424fea8730e1589f423ab6a7d886f047679aa9 # v1.8.35
+        uses: bahmutov/npm-install@e5c7e14408aa6089501de32bd16123b41738047e # v1.10.2
       - name: test
         run: npm test
       - name: lint
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b752c5e..11efc4d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,7 +30,7 @@ jobs:
         run: npm i -g npm@latest
       - name: Build Package
         if: ${{ steps.release.outputs.releases_created }}
-        uses: bahmutov/npm-install@0a424fea8730e1589f423ab6a7d886f047679aa9 # v1.8.35
+        uses: bahmutov/npm-install@e5c7e14408aa6089501de32bd16123b41738047e # v1.10.2
 
       # Release Please has already incremented versions and published tags, so we just
       # need to publish all unpublished versions to NPM here