diff --git a/.github/workflows/npm_release.yml b/.github/workflows/npm_release.yml
index 93abf45c..8b4c2635 100644
--- a/.github/workflows/npm_release.yml
+++ b/.github/workflows/npm_release.yml
@@ -184,7 +184,7 @@ jobs:
           fi
       - name: Test report summary
         if: ${{ !cancelled() }}
-        uses: mikepenz/action-junit-report@d9f48fc87bc235f7e214acf696ca5abc0a986f16 # v6.4.2
+        uses: mikepenz/action-junit-report@a9170d5795813c01ab4901ffb045b52bab4ab09d # v6.5.0
         with:
           report_paths: dist-test/test-out/*junit*.xml
           annotate_only: true
diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
index bafac4b7..41999f7d 100644
--- a/.github/workflows/pull_request.yml
+++ b/.github/workflows/pull_request.yml
@@ -108,7 +108,7 @@ jobs:
         if: ${{ !cancelled() }}
         # annotate_only keeps this usable from fork PRs: it reports via workflow
         # commands and the step summary, so no checks:write token is needed
-        uses: mikepenz/action-junit-report@d9f48fc87bc235f7e214acf696ca5abc0a986f16 # v6.4.2
+        uses: mikepenz/action-junit-report@a9170d5795813c01ab4901ffb045b52bab4ab09d # v6.5.0
         with:
           report_paths: dist-test/test-out/*junit*.xml
           annotate_only: true