diff --git a/.github/workflows/code-review.lock.yml b/.github/workflows/code-review.lock.yml
index 2dc3c965d2bb7d..1c0520d08d92f9 100644
--- a/.github/workflows/code-review.lock.yml
+++ b/.github/workflows/code-review.lock.yml
@@ -80,7 +80,7 @@ jobs:
       title: ${{ steps.sanitized.outputs.title }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@f00748eed7ad5332d58709e92e1946cd1c8d3f8f # v0.63.1
+        uses: github/gh-aw-actions/setup@0048fdad270986610dd71c966d15f7abd7de037a # v0.64.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
       - name: Generate agentic run info
@@ -300,7 +300,7 @@ jobs:
       output_types: ${{ steps.collect_output.outputs.output_types }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@f00748eed7ad5332d58709e92e1946cd1c8d3f8f # v0.63.1
+        uses: github/gh-aw-actions/setup@0048fdad270986610dd71c966d15f7abd7de037a # v0.64.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
       - name: Set runtime paths
@@ -917,7 +917,7 @@ jobs:
       total_count: ${{ steps.missing_tool.outputs.total_count }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@f00748eed7ad5332d58709e92e1946cd1c8d3f8f # v0.63.1
+        uses: github/gh-aw-actions/setup@0048fdad270986610dd71c966d15f7abd7de037a # v0.64.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
       - name: Download agent output artifact
@@ -1013,7 +1013,7 @@ jobs:
       select-copilot-pat_result: ${{ steps.select-copilot-pat.outcome }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@f00748eed7ad5332d58709e92e1946cd1c8d3f8f # v0.63.1
+        uses: github/gh-aw-actions/setup@0048fdad270986610dd71c966d15f7abd7de037a # v0.64.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
       - name: Check team membership for workflow
@@ -1075,7 +1075,7 @@ jobs:
       process_safe_outputs_temporary_id_map: ${{ steps.process_safe_outputs.outputs.temporary_id_map }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@f00748eed7ad5332d58709e92e1946cd1c8d3f8f # v0.63.1
+        uses: github/gh-aw-actions/setup@0048fdad270986610dd71c966d15f7abd7de037a # v0.64.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
       - name: Download agent output artifact
diff --git a/.github/workflows/copilot-echo.lock.yml b/.github/workflows/copilot-echo.lock.yml
index c344f5f43b88d9..ea7efe6f70fdef 100644
--- a/.github/workflows/copilot-echo.lock.yml
+++ b/.github/workflows/copilot-echo.lock.yml
@@ -81,7 +81,7 @@ jobs:
       secret_verification_result: ${{ steps.validate-secret.outputs.verification_result }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@f00748eed7ad5332d58709e92e1946cd1c8d3f8f # v0.63.0
+        uses: github/gh-aw-actions/setup@0048fdad270986610dd71c966d15f7abd7de037a # v0.63.0
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
       - name: Generate agentic run info
@@ -290,7 +290,7 @@ jobs:
       output_types: ${{ steps.collect_output.outputs.output_types }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@f00748eed7ad5332d58709e92e1946cd1c8d3f8f # v0.63.0
+        uses: github/gh-aw-actions/setup@0048fdad270986610dd71c966d15f7abd7de037a # v0.63.0
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
       - name: Set runtime paths
@@ -904,7 +904,7 @@ jobs:
       total_count: ${{ steps.missing_tool.outputs.total_count }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@f00748eed7ad5332d58709e92e1946cd1c8d3f8f # v0.63.0
+        uses: github/gh-aw-actions/setup@0048fdad270986610dd71c966d15f7abd7de037a # v0.63.0
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
       - name: Download agent output artifact
@@ -999,7 +999,7 @@ jobs:
       select-copilot-pat_result: ${{ steps.select-copilot-pat.outcome }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@f00748eed7ad5332d58709e92e1946cd1c8d3f8f # v0.63.0
+        uses: github/gh-aw-actions/setup@0048fdad270986610dd71c966d15f7abd7de037a # v0.63.0
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
       - name: Check team membership for workflow
@@ -1061,7 +1061,7 @@ jobs:
       process_safe_outputs_temporary_id_map: ${{ steps.process_safe_outputs.outputs.temporary_id_map }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@f00748eed7ad5332d58709e92e1946cd1c8d3f8f # v0.63.0
+        uses: github/gh-aw-actions/setup@0048fdad270986610dd71c966d15f7abd7de037a # v0.63.0
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
       - name: Download agent output artifact