diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b361dddd..2e0d26f4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -34,12 +34,12 @@ jobs:
             npm run build
 
       - name: generate artifact attestation for action.yml
-        uses: actions/attest-build-provenance@210c1913531870065f03ce1f9440dd87bc0938cd
+        uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1
         with:
           subject-path: action.yml
 
       - name: generate artifact attestation for lib/index.js
-        uses: actions/attest-build-provenance@210c1913531870065f03ce1f9440dd87bc0938cd
+        uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1
         with:
           subject-path: lib/index.js
 
@@ -63,7 +63,7 @@ jobs:
           git push origin $TAGNAME
 
       - name: report result
-        uses: sarisia/actions-status-discord@448a59224349c2bf9611e68b88787f2b0011965f
+        uses: sarisia/actions-status-discord@ce8cc68e4e626000136b3c702d049a154243e490
         if: always()
         with:
           webhook: ${{ secrets.DISCORD_WEBHOOK }}
@@ -119,7 +119,7 @@ jobs:
       - uses: sarisia/actions/conclusion@main
         id: ghapi
 
-      - uses: sarisia/actions-status-discord@448a59224349c2bf9611e68b88787f2b0011965f
+      - uses: sarisia/actions-status-discord@ce8cc68e4e626000136b3c702d049a154243e490
         if: always()
         with:
           webhook: ${{ secrets.DISCORD_WEBHOOK }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 14848f2f..5c3d43c4 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -31,7 +31,7 @@ jobs:
             npm run build
 
       - name: report result
-        uses: sarisia/actions-status-discord@448a59224349c2bf9611e68b88787f2b0011965f
+        uses: sarisia/actions-status-discord@ce8cc68e4e626000136b3c702d049a154243e490
         if: always()
         with:
           webhook: ${{ secrets.DISCORD_WEBHOOK }}