diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b225af40..fb1a8b05 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,7 +23,7 @@ jobs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
       - uses: actions/checkout@v7
-      - uses: DeterminateSystems/determinate-nix-action@v3.20.0
+      - uses: DeterminateSystems/determinate-nix-action@v3.21.8
         with: &nix-install-with
           extra-conf: |
             accept-flake-config = true
@@ -48,7 +48,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
       - name: Install Nix
-        uses: DeterminateSystems/determinate-nix-action@v3.20.0
+        uses: DeterminateSystems/determinate-nix-action@v3.21.8
         with: *nix-install-with
       - name: Pre-install cachix for Determinate Nix (Darwin)
         if: matrix.system == 'aarch64-darwin'
diff --git a/.github/workflows/flake-checker.yml b/.github/workflows/flake-checker.yml
index 420733a6..44f901f6 100644
--- a/.github/workflows/flake-checker.yml
+++ b/.github/workflows/flake-checker.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: DeterminateSystems/determinate-nix-action@v3
+      - uses: DeterminateSystems/determinate-nix-action@v3.21.8
       - uses: DeterminateSystems/update-flake-lock@main
         with:
           pr-title: "Update Nix flake inputs" # Title of PR to be created
diff --git a/.github/workflows/flakehub-publish-rolling.yml b/.github/workflows/flakehub-publish-rolling.yml
index f4beccd9..b7394885 100644
--- a/.github/workflows/flakehub-publish-rolling.yml
+++ b/.github/workflows/flakehub-publish-rolling.yml
@@ -13,7 +13,7 @@ jobs:
       - uses: "actions/checkout@v7"
         with:
           persist-credentials: false
-      - uses: "DeterminateSystems/determinate-nix-action@v3"
+      - uses: "DeterminateSystems/determinate-nix-action@v3.21.8"
         with:
           extra-conf: |
             allow-import-from-derivation = true