diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7d2e1fe6..c984d848 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,7 +29,7 @@ jobs:
       # vp (version resolved from the vite-plus range via yarn.lock), sets up
       # Node and the pinned yarn, and caches the yarn store.
       - name: 'Setup Vite+'
-        uses: voidzero-dev/setup-vp@1b32467adbe183473499fd9d5d372c3ed9641754 # v1.18.0
+        uses: voidzero-dev/setup-vp@49c3e4e92c52e7f8392712a9267bbe71c5ab30e5 # v1.19.0
         with:
           node-version: '24'
           cache: true
@@ -54,7 +54,7 @@ jobs:
           fetch-depth: 0
 
       - name: 'Setup Vite+'
-        uses: voidzero-dev/setup-vp@1b32467adbe183473499fd9d5d372c3ed9641754 # v1.18.0
+        uses: voidzero-dev/setup-vp@49c3e4e92c52e7f8392712a9267bbe71c5ab30e5 # v1.19.0
         with:
           node-version: '24'
           cache: true
@@ -80,7 +80,7 @@ jobs:
           fetch-depth: 0
 
       - name: 'Setup Vite+'
-        uses: voidzero-dev/setup-vp@1b32467adbe183473499fd9d5d372c3ed9641754 # v1.18.0
+        uses: voidzero-dev/setup-vp@49c3e4e92c52e7f8392712a9267bbe71c5ab30e5 # v1.19.0
         with:
           node-version: ${{ matrix.node-version }}
           cache: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5dfd3385..5a4a3a15 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -34,7 +34,7 @@ jobs:
           # the job token is read-only; git push must use the GH_TOKEN PAT from env
           persist-credentials: false
       - name: 'Setup Vite+'
-        uses: voidzero-dev/setup-vp@1b32467adbe183473499fd9d5d372c3ed9641754 # v1.18.0
+        uses: voidzero-dev/setup-vp@49c3e4e92c52e7f8392712a9267bbe71c5ab30e5 # v1.19.0
         with:
           node-version: '24'
           cache: true