diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 21bdca4..e012c3f 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -66,7 +66,7 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2  # v4.38.2
+        uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370  # v4.39.1
         with:
           languages: ${{ matrix.language }}
           # Both languages are interpreted, so there is nothing to compile.
@@ -75,6 +75,6 @@ jobs:
           build-mode: none
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2  # v4.38.2
+        uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370  # v4.39.1
         with:
           category: "/language:${{ matrix.language }}"
diff --git a/.github/workflows/container-release.yml b/.github/workflows/container-release.yml
index 1243e1f..808492b 100644
--- a/.github/workflows/container-release.yml
+++ b/.github/workflows/container-release.yml
@@ -194,7 +194,7 @@ jobs:
         uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069  # v4.4.1
 
       - name: Log in to GitHub Container Registry
-        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f  # v4.6.0
+        uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6  # v4.7.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
diff --git a/.github/workflows/regenerate-artifacts.yml b/.github/workflows/regenerate-artifacts.yml
index 9de031c..d6ac7de 100644
--- a/.github/workflows/regenerate-artifacts.yml
+++ b/.github/workflows/regenerate-artifacts.yml
@@ -277,7 +277,7 @@ jobs:
 
       - name: Mint the App token
         id: app
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510  # v3.3.0
         with:
           client-id: ${{ secrets.REGENERATE_ARTIFACTS_APP_CLIENT_ID }}
           private-key: ${{ secrets.REGENERATE_ARTIFACTS_APP_PRIVATE_KEY }}