diff --git a/.github/workflows/__diagnostics-without-db.yml b/.github/workflows/__diagnostics-without-db.yml
index 80bf232d0..2f340ff3c 100644
--- a/.github/workflows/__diagnostics-without-db.yml
+++ b/.github/workflows/__diagnostics-without-db.yml
@@ -51,7 +51,7 @@ jobs:
       - name: Check out repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install Node.js
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 20.x
           cache: npm
@@ -83,9 +83,10 @@ jobs:
           cd ../action
           npx tsx ./pr-checks/diagnostics-without-db.ts
     env:
-      CODEQL_ACTION_TEST_MODE: false
+      CODEQL_ACTION_SKIP_GENERATE_FAILED_SARIF: false
       CODEQL_ACTION_SKIP_SARIF_UPLOAD: true
       CODEQL_ACTION_TESTING_ENVIRONMENT: codeql-action-pr-checks
+      CODEQL_ACTION_TEST_MODE: true
   diagnostics-without-db-validation:
     if: github.triggering_actor != 'dependabot[bot]'
     needs:
@@ -99,7 +100,7 @@ jobs:
       - name: Check out repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install Node.js
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 20.x
           cache: npm
diff --git a/pr-checks/checks/diagnostics-without-db.yml b/pr-checks/checks/diagnostics-without-db.yml
index 197b40e36..b1f3b8f14 100644
--- a/pr-checks/checks/diagnostics-without-db.yml
+++ b/pr-checks/checks/diagnostics-without-db.yml
@@ -7,7 +7,7 @@ installNode: true
 
 env:
   # Allow the failed SARIF file to be generated.
-  CODEQL_ACTION_TEST_MODE: false
+  CODEQL_ACTION_SKIP_GENERATE_FAILED_SARIF: false
   # But don't actually upload it.
   CODEQL_ACTION_SKIP_SARIF_UPLOAD: true
   # Mark telemetry for this workflow so it can be treated separately.