diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9d398923..19fe1894 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,7 +12,7 @@ jobs:
       contents: write
       packages: read
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
 
       - uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20
         with:
@@ -21,7 +21,7 @@ jobs:
           password: ${{ github.token }}
 
       - name: build
-        uses: devcontainers/ci@7957e0cf6d027a8ab027745f399fcdbd3aa74f0f
+        uses: devcontainers/ci@a56d055efecd725e8cfe370543b6071b79989cc8
         with:
           imageName: ghcr.io/${{ github.repository }}/devcontainer
           cacheFrom: ghcr.io/${{ github.repository }}/devcontainer
@@ -50,7 +50,7 @@ jobs:
           git push origin $TAGNAME
 
       - name: report result
-        uses: sarisia/actions-status-discord@8b35962ad57c30272ae149c9ee193887b39e1b69
+        uses: sarisia/actions-status-discord@6712a17f7d0531d44cd42ca2a878b0bdfd07b62a
         if: always()
         with:
           webhook: ${{ secrets.DISCORD_WEBHOOK }}
@@ -76,7 +76,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           ref: ${{ github.ref_name }}
 
@@ -106,7 +106,7 @@ jobs:
       - uses: sarisia/actions/conclusion@main
         id: ghapi
 
-      - uses: sarisia/actions-status-discord@8b35962ad57c30272ae149c9ee193887b39e1b69
+      - uses: sarisia/actions-status-discord@6712a17f7d0531d44cd42ca2a878b0bdfd07b62a
         if: always()
         with:
           webhook: ${{ secrets.DISCORD_WEBHOOK }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index cda73bbd..29d1be03 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -11,7 +11,7 @@ jobs:
       packages: read
       contents: read
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
 
       - uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20
         with:
@@ -20,7 +20,7 @@ jobs:
           password: ${{ github.token }}
 
       - name: build
-        uses: devcontainers/ci@7957e0cf6d027a8ab027745f399fcdbd3aa74f0f
+        uses: devcontainers/ci@a56d055efecd725e8cfe370543b6071b79989cc8
         with:
           imageName: ghcr.io/${{ github.repository }}/devcontainer
           cacheFrom: ghcr.io/${{ github.repository }}/devcontainer
@@ -31,7 +31,7 @@ jobs:
             npm run build
 
       - name: report result
-        uses: sarisia/actions-status-discord@8b35962ad57c30272ae149c9ee193887b39e1b69
+        uses: sarisia/actions-status-discord@6712a17f7d0531d44cd42ca2a878b0bdfd07b62a
         if: always()
         with:
           webhook: ${{ secrets.DISCORD_WEBHOOK }}