diff --git a/.github/workflows/codeception.yaml b/.github/workflows/codeception.yaml
index 9f3910f5f1..fa38e7a344 100644
--- a/.github/workflows/codeception.yaml
+++ b/.github/workflows/codeception.yaml
@@ -42,7 +42,7 @@ jobs:
                     php-version: "${{ matrix.php-version }}"
 
             - name: "Install dependencies with Composer"
-              uses: "ramsey/composer-install@v3"
+              uses: "ramsey/composer-install@v4"
               with:
                   dependency-versions: "${{ matrix.dependencies }}"
 
diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index 2f1229587a..ea0e252afe 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -36,7 +36,7 @@ jobs:
           composer config repositories.private-packagist '{"type": "composer", "url": "https://repo.pimcore.com/github-actions/", "canonical": true}'
 
       - name: "Install dependencies with Composer"
-        uses: "ramsey/composer-install@v3"
+        uses: "ramsey/composer-install@v4"
         # Pass the private-Packagist token via a step-scoped env var instead of
         # writing it to Composer's global auth.json. A global credential would
         # persist on the runner filesystem and remain readable by the Copilot