diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ad11fb4a..b54e6f6b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,7 +33,7 @@ jobs:
         uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6
 
       - name: "Install PHP"
-        uses: "shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1" # v2
+        uses: "shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f" # v2
         with:
           php-version: "${{ matrix.php-version }}"
           ini-values: memory_limit=-1
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6a60ae19..739c534a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-24.04
     name: Release Automation
     steps:
-      - uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2
+      - uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2
         id: generate-token
         with:
           app-id: ${{ secrets.LENDABOT_APP_ID }}