diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2dd2fa8c..852338a4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,7 +15,7 @@ jobs:
       attestations: write
 
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
 
       - uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446
         with:
@@ -34,12 +34,12 @@ jobs:
             npm run build
 
       - name: generate artifact attestation for action.yml
-        uses: actions/attest-build-provenance@173725a1209d09b31f9d30a3890cf2757ebbff0d
+        uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e
         with:
           subject-path: action.yml
 
       - name: generate artifact attestation for lib/index.js
-        uses: actions/attest-build-provenance@173725a1209d09b31f9d30a3890cf2757ebbff0d
+        uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e
         with:
           subject-path: lib/index.js
 
@@ -63,7 +63,7 @@ jobs:
           git push origin $TAGNAME
 
       - name: report result
-        uses: sarisia/actions-status-discord@4138d2d190a466c986fe9842407284d9fc3e7793
+        uses: sarisia/actions-status-discord@609229a5cc8b81e6de55f63e6cdd5e171a3c1895
         if: always()
         with:
           webhook: ${{ secrets.DISCORD_WEBHOOK }}
@@ -90,7 +90,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
         with:
           ref: ${{ github.ref_name }}
 
@@ -120,7 +120,7 @@ jobs:
       - uses: sarisia/actions/conclusion@main
         id: ghapi
 
-      - uses: sarisia/actions-status-discord@4138d2d190a466c986fe9842407284d9fc3e7793
+      - uses: sarisia/actions-status-discord@609229a5cc8b81e6de55f63e6cdd5e171a3c1895
         if: always()
         with:
           webhook: ${{ secrets.DISCORD_WEBHOOK }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 9db7fe2f..1865ed73 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -11,7 +11,7 @@ jobs:
       packages: read
       contents: read
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
 
       - uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446
         with:
@@ -31,7 +31,7 @@ jobs:
             npm run build
 
       - name: report result
-        uses: sarisia/actions-status-discord@4138d2d190a466c986fe9842407284d9fc3e7793
+        uses: sarisia/actions-status-discord@609229a5cc8b81e6de55f63e6cdd5e171a3c1895
         if: always()
         with:
           webhook: ${{ secrets.DISCORD_WEBHOOK }}