diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 699d1fc6..3104726c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -159,7 +159,7 @@ jobs:
       # This job runs `just test-python*` below but never installed `just` - it
       # inherited whatever the runner happened to have. Provision it explicitly.
       - name: Set up mise tools
-        uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4
+        uses: jdx/mise-action@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 # v4
         with:
           install_args: just
           cache: true
@@ -318,7 +318,7 @@ jobs:
         uses: ./.github/actions/setup-rust-kache
 
       - name: Set up mise tools
-        uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4
+        uses: jdx/mise-action@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 # v4
         with:
           install_args: node npm:mcporter
           cache: true
@@ -400,7 +400,7 @@ jobs:
         uses: ./.github/actions/setup-rust-kache
 
       - name: Install taplo
-        uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4
+        uses: jdx/mise-action@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 # v4
         with:
           install_args: cargo:taplo-cli
           cache: true
@@ -441,7 +441,7 @@ jobs:
       # missing from PATH for any reason, so this step is not load-bearing
       # for the rest of this job's Rust-only checks.
       - name: Set up mise tools
-        uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4
+        uses: jdx/mise-action@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 # v4
         with:
           install_args: node pnpm
           cache: true
diff --git a/.github/workflows/codex-schema-drift-monitor.yml b/.github/workflows/codex-schema-drift-monitor.yml
index 066661bf..479a08cd 100644
--- a/.github/workflows/codex-schema-drift-monitor.yml
+++ b/.github/workflows/codex-schema-drift-monitor.yml
@@ -62,7 +62,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up mise tools
-        uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4
+        uses: jdx/mise-action@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 # v4
         with:
           install_args: gh
           cache: true
diff --git a/.github/workflows/python-platform-soak.yml b/.github/workflows/python-platform-soak.yml
index c27fccf0..ac38b1fc 100644
--- a/.github/workflows/python-platform-soak.yml
+++ b/.github/workflows/python-platform-soak.yml
@@ -23,7 +23,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up mise tools
-        uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14
+        uses: jdx/mise-action@7e36c90d9ab29c415a2384db3006f3ec8a8cc654
         with:
           install_args: python uv
           cache: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 46d8d3da..7284cc70 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -122,7 +122,7 @@ jobs:
           ref: ${{ needs.validate-release-tag.outputs.release_ref }}
 
       - name: Set up mise tools
-        uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4
+        uses: jdx/mise-action@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 # v4
         with:
           install_args: node pnpm
           cache: true
diff --git a/.github/workflows/rmcp-release-monitor.yml b/.github/workflows/rmcp-release-monitor.yml
index 1bcabd7c..ba7feaf2 100644
--- a/.github/workflows/rmcp-release-monitor.yml
+++ b/.github/workflows/rmcp-release-monitor.yml
@@ -31,7 +31,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up mise tools
-        uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4
+        uses: jdx/mise-action@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 # v4
         with:
           install_args: gh
           cache: true