diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index d4d9ad4ce74..0900feed5a3 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -17,7 +17,7 @@ jobs:
       security-events: write
     steps:
     - uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3  # v3.5.0
-    - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9  # v4.0.0
+    - uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34  # v5.3.0
       with:
         go-version-file: 'go.mod'
     - uses: github/codeql-action/init@04df1262e6247151b5ac09cd2c303ac36ad3f62b  # v2.2.9
diff --git a/.github/workflows/mirror_demos.yaml b/.github/workflows/mirror_demos.yaml
index 2d434c56a5a..f2207c2d4a7 100644
--- a/.github/workflows/mirror_demos.yaml
+++ b/.github/workflows/mirror_demos.yaml
@@ -26,7 +26,7 @@ jobs:
         username: ${{ secrets.QUAY_IO_USER }}
         password: ${{ secrets.QUAY_IO_PASSWORD }}
     - uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3  # v3.5.0
-    - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9  # v4.0.0
+    - uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34  # v5.3.0
       with:
         go-version-file: 'go.mod'
     - name: install regbot
diff --git a/.github/workflows/mirror_deps.yaml b/.github/workflows/mirror_deps.yaml
index 01fe6212e73..06052aa6eb4 100644
--- a/.github/workflows/mirror_deps.yaml
+++ b/.github/workflows/mirror_deps.yaml
@@ -26,7 +26,7 @@ jobs:
         username: ${{ secrets.QUAY_IO_USER }}
         password: ${{ secrets.QUAY_IO_PASSWORD }}
     - uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3  # v3.5.0
-    - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9  # v4.0.0
+    - uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34  # v5.3.0
       with:
         go-version-file: 'go.mod'
     - name: install regbot
diff --git a/.github/workflows/mirror_releases.yaml b/.github/workflows/mirror_releases.yaml
index 3b1866a4dd1..8dea01c927a 100644
--- a/.github/workflows/mirror_releases.yaml
+++ b/.github/workflows/mirror_releases.yaml
@@ -27,7 +27,7 @@ jobs:
         username: ${{ secrets.QUAY_IO_USER }}
         password: ${{ secrets.QUAY_IO_PASSWORD }}
     - uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3  # v3.5.0
-    - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9  # v4.0.0
+    - uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34  # v5.3.0
       with:
         go-version-file: 'go.mod'
     - name: install regbot