diff --git a/.github/workflows/lawa.yml b/.github/workflows/lawa.yml
index 366e32b69..993b4300d 100644
--- a/.github/workflows/lawa.yml
+++ b/.github/workflows/lawa.yml
@@ -6,7 +6,8 @@ jobs:
     uses: phrase/actions/.github/workflows/lawa-npm-ci.yml@main
     with:
       node-version: "24.14.1"
-      ruby-version: 3.1.3
+      ruby-version: "3.3"
+      ruby-bundler-version: 2.5.23
       decisions-file: config/license-decisions.yml
     secrets:
       github-token: ${{ secrets.GH_LAWA_ACCESS_TOKEN }}
diff --git a/.github/workflows/test-cli.yml b/.github/workflows/test-cli.yml
index e4c0a5b82..760edbd25 100644
--- a/.github/workflows/test-cli.yml
+++ b/.github/workflows/test-cli.yml
@@ -43,7 +43,7 @@ jobs:
           go build .
           go test -v ./...
       - name: Install Ruby and rspec
-        uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252
+        uses: ruby/setup-ruby@7f797815d8adceb1c412e7abefdd1ab4abc47a5f # v1.335.0
         with:
           ruby-version: '3.2'
           bundler-cache: true
@@ -53,8 +53,9 @@ jobs:
           cd ./clients/cli
           bundle exec rspec --format documentation
       - name: License check
-        uses: phrase/actions/lawa-ci@v1
+        uses: phrase/actions/lawa-ci@d2b850633ae97af7b9e7507bdb8ed8c8e2f3da5d # main, includes setup-ruby v1.335.0
         with:
+          ruby-bundler-version: 2.5.23
           github-token: ${{ secrets.GH_LAWA_ACCESS_TOKEN }}
           decisions-file: .license-decisions.yml
           working-directory: clients/cli
diff --git a/.github/workflows/test-go.yml b/.github/workflows/test-go.yml
index 70aa9e770..006fc0981 100644
--- a/.github/workflows/test-go.yml
+++ b/.github/workflows/test-go.yml
@@ -17,8 +17,9 @@ jobs:
           cd ./clients/go
           go test ./... -v
       - name: License check
-        uses: phrase/actions/lawa-ci@v1
+        uses: phrase/actions/lawa-ci@d2b850633ae97af7b9e7507bdb8ed8c8e2f3da5d # main, includes setup-ruby v1.335.0
         with:
+          ruby-bundler-version: 2.5.23
           github-token: ${{ secrets.GH_LAWA_ACCESS_TOKEN }}
           decisions-file: .license-decisions.yml
           working-directory: clients/go
diff --git a/.github/workflows/test-java.yml b/.github/workflows/test-java.yml
index 1b7301a9e..936cd1cba 100644
--- a/.github/workflows/test-java.yml
+++ b/.github/workflows/test-java.yml
@@ -20,8 +20,9 @@ jobs:
         build-root-directory: ./clients/java
         arguments: test --info
     - name: License check
-      uses: phrase/actions/lawa-ci@v1
+      uses: phrase/actions/lawa-ci@d2b850633ae97af7b9e7507bdb8ed8c8e2f3da5d # main, includes setup-ruby v1.335.0
       with:
+        ruby-bundler-version: 2.5.23
         github-token: ${{ secrets.GH_LAWA_ACCESS_TOKEN }}
         decisions-file: .license-decisions.yml
         working-directory: clients/java
diff --git a/.github/workflows/test-php.yml b/.github/workflows/test-php.yml
index 1f86406f7..2dc30f575 100644
--- a/.github/workflows/test-php.yml
+++ b/.github/workflows/test-php.yml
@@ -19,8 +19,9 @@ jobs:
           version: '12.1'
           configuration: ./clients/php/phpunit.xml.dist
       - name: License check
-        uses: phrase/actions/lawa-ci@v1
+        uses: phrase/actions/lawa-ci@d2b850633ae97af7b9e7507bdb8ed8c8e2f3da5d # main, includes setup-ruby v1.335.0
         with:
+          ruby-bundler-version: 2.5.23
           github-token: ${{ secrets.GH_LAWA_ACCESS_TOKEN }}
           decisions-file: .license-decisions.yml
           working-directory: clients/php
diff --git a/.github/workflows/test-python.yml b/.github/workflows/test-python.yml
index eb9bdce62..0f7d05924 100644
--- a/.github/workflows/test-python.yml
+++ b/.github/workflows/test-python.yml
@@ -20,8 +20,9 @@ jobs:
           pip install -r requirements.txt -r test-requirements.txt
           pytest
       - name: License check
-        uses: phrase/actions/lawa-ci@v1
+        uses: phrase/actions/lawa-ci@d2b850633ae97af7b9e7507bdb8ed8c8e2f3da5d # main, includes setup-ruby v1.335.0
         with:
+          ruby-bundler-version: 2.5.23
           github-token: ${{ secrets.GH_LAWA_ACCESS_TOKEN }}
           decisions-file: .license-decisions.yml
           working-directory: clients/python
diff --git a/.github/workflows/test-ruby.yml b/.github/workflows/test-ruby.yml
index 85359ef5e..45e09fe56 100644
--- a/.github/workflows/test-ruby.yml
+++ b/.github/workflows/test-ruby.yml
@@ -10,9 +10,9 @@ jobs:
           npm install
           npm run generate.ruby
       - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@7f797815d8adceb1c412e7abefdd1ab4abc47a5f # v1.335.0
         with:
-          ruby-version: 3.2.1
+          ruby-version: '3.2'
           # runs 'bundle install' and caches installed gems automatically
           bundler-cache: true
           working-directory: ./clients/ruby
diff --git a/openapi-generator/templates/ruby-client/Gemfile.mustache b/openapi-generator/templates/ruby-client/Gemfile.mustache
index 794aff39f..0ec701aa0 100644
--- a/openapi-generator/templates/ruby-client/Gemfile.mustache
+++ b/openapi-generator/templates/ruby-client/Gemfile.mustache
@@ -5,6 +5,6 @@ gemspec
 group :development, :test do
   gem 'rake', '~> 13.0.1'
   gem 'pry-byebug'
-  gem 'rubocop', '~> 0.66.0'
+  gem 'rubocop', '~> 1.0'
   gem 'webmock'
 end