diff --git a/.github/workflows/npm_release.yml b/.github/workflows/npm_release.yml
index 1b2f13a16..c8963dbae 100644
--- a/.github/workflows/npm_release.yml
+++ b/.github/workflows/npm_release.yml
@@ -212,7 +212,7 @@ jobs:
           path: test-app/dist/android_unit_test_results.xml
       - name: Test report summary
         if: ${{ !cancelled() }}
-        uses: mikepenz/action-junit-report@d9f48fc87bc235f7e214acf696ca5abc0a986f16 # v6.4.2
+        uses: mikepenz/action-junit-report@a9170d5795813c01ab4901ffb045b52bab4ab09d # v6.5.0
         with:
           report_paths: test-app/dist/android_unit_test_results.xml
           annotate_only: true
diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
index b9d73a4a9..9f18c7999 100644
--- a/.github/workflows/pull_request.yml
+++ b/.github/workflows/pull_request.yml
@@ -186,7 +186,7 @@ jobs:
         if: ${{ !cancelled() }}
         # annotate_only keeps this usable from fork PRs: it reports via workflow
         # commands and the step summary, so no checks:write token is needed
-        uses: mikepenz/action-junit-report@d9f48fc87bc235f7e214acf696ca5abc0a986f16 # v6.4.2
+        uses: mikepenz/action-junit-report@a9170d5795813c01ab4901ffb045b52bab4ab09d # v6.5.0
         with:
           report_paths: test-app/dist/android_unit_test_results.xml
           annotate_only: true