diff --git a/.github/workflows/ci-react-native-iap.yml b/.github/workflows/ci-react-native-iap.yml
index cb36bbe2b..ef2f9cb5c 100644
--- a/.github/workflows/ci-react-native-iap.yml
+++ b/.github/workflows/ci-react-native-iap.yml
@@ -238,7 +238,7 @@ jobs:
           node-version: 20
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1
+        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1
         with:
           ruby-version: "3.3"
           working-directory: libraries/react-native-iap/example
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 01a614e7b..ecacaf753 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -90,7 +90,7 @@ jobs:
           bun-version: 1.3.13
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1
+        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1
         with:
           ruby-version: "3.3"
           working-directory: libraries/react-native-iap/example
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index ca5dad43c..75f667224 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -442,7 +442,7 @@ jobs:
         if: >-
           matrix.component == 'react-native' &&
           needs.pick-mac-runner.outputs.runner != 'self-mac'
-        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1
+        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1
         with:
           ruby-version: "3.3"
           working-directory: libraries/react-native-iap/example
diff --git a/.github/workflows/release-apple.yml b/.github/workflows/release-apple.yml
index 278df72e0..2b0f0ebc0 100644
--- a/.github/workflows/release-apple.yml
+++ b/.github/workflows/release-apple.yml
@@ -203,7 +203,7 @@ jobs:
           git checkout "$SELECTED_TAG"
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1
+        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1
         with:
           ruby-version: "3.0"
           bundler-cache: false
diff --git a/.github/workflows/release-react-native.yml b/.github/workflows/release-react-native.yml
index dbd4fa517..608cd1e2e 100644
--- a/.github/workflows/release-react-native.yml
+++ b/.github/workflows/release-react-native.yml
@@ -129,7 +129,7 @@ jobs:
           node-version: 20
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1
+        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1
         with:
           ruby-version: "3.3"
           working-directory: libraries/react-native-iap/example
diff --git a/scripts/release-branch-policy.test.mjs b/scripts/release-branch-policy.test.mjs
index c689ebf09..a514a5e6a 100644
--- a/scripts/release-branch-policy.test.mjs
+++ b/scripts/release-branch-policy.test.mjs
@@ -162,7 +162,7 @@ test("React Native Ruby dependencies are locked and installed frozen", () => {
     const install = extractNamedStep(workflow, installStep).source;
     assert.match(
       setup,
-      /ruby\/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1/u,
+      /ruby\/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1/u,
     );
     assert.match(setup, /ruby-version: "3\.3"/u);
     assert.match(