diff --git a/.github/workflows/architectural-rules.yml b/.github/workflows/architectural-rules.yml
index c6740fb0..ede1a934 100644
--- a/.github/workflows/architectural-rules.yml
+++ b/.github/workflows/architectural-rules.yml
@@ -17,7 +17,7 @@ jobs:
               uses: actions/checkout@v7
 
             - name: Install PHP
-              uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
+              uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
               with:
                   php-version: '8.2'
                   tools: composer:v2.2
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f603e124..2da5e63b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -37,7 +37,7 @@ jobs:
     - uses: actions/checkout@v7
 
     - name: Install PHP
-      uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
+      uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
       with:
         php-version: ${{ matrix.php-versions }}
         coverage: pcov
@@ -106,7 +106,7 @@ jobs:
       - uses: actions/checkout@v7
 
       - name: Install PHP
-        uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
+        uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
         with:
           php-version: 8.2
           tools: composer:v2.2
@@ -152,7 +152,7 @@ jobs:
       - uses: actions/checkout@v7
 
       - name: Install PHP
-        uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
+        uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
         with:
           php-version: ${{ matrix.php-versions }}
         env:
diff --git a/.github/workflows/cs-fixer.yml b/.github/workflows/cs-fixer.yml
index 8e974a9e..9462081b 100644
--- a/.github/workflows/cs-fixer.yml
+++ b/.github/workflows/cs-fixer.yml
@@ -13,7 +13,7 @@ jobs:
       - uses: actions/checkout@v7
 
       - name: Install PHP
-        uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
+        uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
         with:
           php-version: '8.0'
           tools: composer:v2.2