diff --git a/.github/workflows/ai-breaking-change.yml b/.github/workflows/ai-breaking-change.yml
index f795671..2122b5e 100644
--- a/.github/workflows/ai-breaking-change.yml
+++ b/.github/workflows/ai-breaking-change.yml
@@ -119,7 +119,7 @@ jobs:
       - name: Detect breaking changes
         if: steps.filter.outputs.skip != 'true'
         id: detect
-        uses: actions/ai-inference@e09e65981758de8b2fdab13c2bfb7c7d5493b0b6 # v2.0.7
+        uses: actions/ai-inference@17ff458cb182449bbb2e43701fcd98f6af8f6570 # v2.1.0
         with:
           prompt-file: /tmp/prompt.yml
 
diff --git a/.github/workflows/ai-classify-pr.yml b/.github/workflows/ai-classify-pr.yml
index 8739d01..03cdcbc 100644
--- a/.github/workflows/ai-classify-pr.yml
+++ b/.github/workflows/ai-classify-pr.yml
@@ -85,7 +85,7 @@ jobs:
 
       - name: Classify
         id: classify
-        uses: actions/ai-inference@e09e65981758de8b2fdab13c2bfb7c7d5493b0b6 # v2.0.7
+        uses: actions/ai-inference@17ff458cb182449bbb2e43701fcd98f6af8f6570 # v2.1.0
         with:
           prompt-file: /tmp/prompt.yml
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c4bb99e..d06924f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,9 +18,9 @@ jobs:
           persist-credentials: false
 
       - name: Run actionlint
-        uses: rhysd/actionlint@393031adb9afb225ee52ae2ccd7a5af5525e03e8 # v1.7.11
+        uses: rhysd/actionlint@914e7df21a07ef503a81201c76d2b11c789d3fca # v1.7.12
 
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
+        uses: zizmorcore/zizmor-action@a16621b09c6db4281f81a93cb393b05dcd7b7165 # v0.5.5
         with:
           advanced-security: false