diff --git a/.github/workflows/ai-breaking-change.yml b/.github/workflows/ai-breaking-change.yml
index f795671..5f60faa 100644
--- a/.github/workflows/ai-breaking-change.yml
+++ b/.github/workflows/ai-breaking-change.yml
@@ -34,7 +34,7 @@ jobs:
       breaking: ${{ steps.parse.outputs.breaking }}
       items: ${{ steps.parse.outputs.items }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
 
@@ -119,7 +119,7 @@ jobs:
       - name: Detect breaking changes
         if: steps.filter.outputs.skip != 'true'
         id: detect
-        uses: actions/ai-inference@e09e65981758de8b2fdab13c2bfb7c7d5493b0b6 # v2.0.7
+        uses: actions/ai-inference@a7805884c80886efc241e94a5351df715968a0ad # v2.1.1
         with:
           prompt-file: /tmp/prompt.yml
 
diff --git a/.github/workflows/ai-classify-pr.yml b/.github/workflows/ai-classify-pr.yml
index 8739d01..e5895d2 100644
--- a/.github/workflows/ai-classify-pr.yml
+++ b/.github/workflows/ai-classify-pr.yml
@@ -27,7 +27,7 @@ jobs:
     outputs:
       label: ${{ steps.validate.outputs.label }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
 
@@ -85,7 +85,7 @@ jobs:
 
       - name: Classify
         id: classify
-        uses: actions/ai-inference@e09e65981758de8b2fdab13c2bfb7c7d5493b0b6 # v2.0.7
+        uses: actions/ai-inference@a7805884c80886efc241e94a5351df715968a0ad # v2.1.1
         with:
           prompt-file: /tmp/prompt.yml
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c4bb99e..6d5641c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,14 +13,14 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
 
       - name: Run actionlint
-        uses: rhysd/actionlint@393031adb9afb225ee52ae2ccd7a5af5525e03e8 # v1.7.11
+        uses: rhysd/actionlint@914e7df21a07ef503a81201c76d2b11c789d3fca # v1.7.12
 
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
+        uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
         with:
           advanced-security: false