diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 0ca54b5b..faf83d69 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -51,7 +51,7 @@ jobs:
               - CHANGELOG.md
               - .github/workflows/test.*
       - if: steps.changes.outputs.template == 'true' 
-        uses: DeterminateSystems/determinate-nix-action@v3.8.2
+        uses: DeterminateSystems/determinate-nix-action@v3.12.2
         with:
           extra-config: accept-flake-config = true
       - if: steps.changes.outputs.template == 'true' 
diff --git a/.github/workflows/update-flake-lock-inputs.yml b/.github/workflows/update-flake-lock-inputs.yml
index b2dc59b6..09cd0d4e 100644
--- a/.github/workflows/update-flake-lock-inputs.yml
+++ b/.github/workflows/update-flake-lock-inputs.yml
@@ -25,7 +25,7 @@ jobs:
           private-key: ${{ secrets.BOT_PRIVATE_KEY }}
       - name: Checkout repository
         uses: actions/checkout@v4
-      - uses: DeterminateSystems/determinate-nix-action@v3.8.2
+      - uses: DeterminateSystems/determinate-nix-action@v3.12.2
         with:
           extra-config: accept-flake-config = true
       - name: Update ${{ matrix.template }} flake.lock ${{ matrix.input }}
diff --git a/.github/workflows/update-flake-lock.yml b/.github/workflows/update-flake-lock.yml
index c7c2102b..5833f21f 100644
--- a/.github/workflows/update-flake-lock.yml
+++ b/.github/workflows/update-flake-lock.yml
@@ -21,7 +21,7 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-      - uses: DeterminateSystems/determinate-nix-action@v3.8.2
+      - uses: DeterminateSystems/determinate-nix-action@v3.12.2
         with:
           extra-config: accept-flake-config = true
       - name: Read inputs from flake.nix