diff --git a/.github/workflows/build-healthchat-desktop.yaml b/.github/workflows/build-healthchat-desktop.yaml
index efb6a56419..aafee90294 100644
--- a/.github/workflows/build-healthchat-desktop.yaml
+++ b/.github/workflows/build-healthchat-desktop.yaml
@@ -99,7 +99,9 @@ jobs:
                   ref: ${{ steps.workspace.outputs.ref }}
                   persist-credentials: false
 
-            - uses: pnpm/action-setup@v4
+            # v6.0.8 reads the pnpm version from devEngines.packageManager in package.json
+            # (this repo has no top-level "packageManager" field, which older majors require).
+            - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
             - name: Setup Node.js
               uses: actions/setup-node@v4
               with: