diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4962b14..d3a9f13 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,11 +14,11 @@ jobs:
       id-token: write
     environment: release
     steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
       - uses: ruby/setup-ruby@003a5c4d8d6321bd302e38f6f0ec593f77f06600 # v1.319.0
         with:
-          ruby-version: ruby
+          ruby-version: "4.0"
           bundler-cache: true
       - uses: rubygems/release-gem@052cc82692552de3ef2b81fd670e41d13cba8092 # v1.4.0
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 10dd3eb..cdde1ba 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -14,7 +14,7 @@ jobs:
       matrix:
         ruby: ["3.2", "3.3", "3.4", "4.0"]
     steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Set up Ruby ${{ matrix.ruby }}
         uses: ruby/setup-ruby@003a5c4d8d6321bd302e38f6f0ec593f77f06600 # v1.319.0
diff --git a/test/release_workflow_test.rb b/test/release_workflow_test.rb
index b381b62..e81664d 100644
--- a/test/release_workflow_test.rb
+++ b/test/release_workflow_test.rb
@@ -6,6 +6,7 @@ require "yaml"
 class ReleaseWorkflowTest < Minitest::Test
   ROOT = File.expand_path("..", __dir__)
   WORKFLOW_PATH = File.join(ROOT, ".github", "workflows", "release.yml")
+  SETUP_RUBY_ACTION = "ruby/setup-ruby@003a5c4d8d6321bd302e38f6f0ec593f77f06600"
   RELEASE_GEM_ACTION = "rubygems/release-gem@052cc82692552de3ef2b81fd670e41d13cba8092"
 
   def workflow
@@ -28,6 +29,9 @@ class ReleaseWorkflowTest < Minitest::Test
     )
 
     steps = push_job.fetch("steps")
+    setup_ruby = steps.find { |step| step["uses"] == SETUP_RUBY_ACTION }
+
+    assert_equal "4.0", setup_ruby.dig("with", "ruby-version")
     assert_equal 1, steps.count { |step| step["uses"] == RELEASE_GEM_ACTION }
     refute steps.any? { |step| step.fetch("run", "").match?(/\bgem\s+push\b/) }
   end
diff --git a/test/workflow_contract_test.rb b/test/workflow_contract_test.rb
index 4d0904c..428d3ce 100644
--- a/test/workflow_contract_test.rb
+++ b/test/workflow_contract_test.rb
@@ -8,7 +8,7 @@ class WorkflowContractTest < Minitest::Test
   WORKFLOW_DIRECTORY = File.join(ROOT, ".github", "workflows")
   TEST_WORKFLOW_PATH = File.join(WORKFLOW_DIRECTORY, "test.yml")
   ACTION_PINS = {
-    "actions/checkout" => "93cb6efe18208431cddfb8368fd83d5badbf9bfd",
+    "actions/checkout" => "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0",
     "ruby/setup-ruby" => "003a5c4d8d6321bd302e38f6f0ec593f77f06600",
     "rubygems/release-gem" => "052cc82692552de3ef2b81fd670e41d13cba8092"
   }.freeze