diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml
index 501e95d..70695d1 100644
--- a/.github/workflows/checks.yaml
+++ b/.github/workflows/checks.yaml
@@ -15,7 +15,7 @@ jobs:
       status: ${{ job.status }}
     steps:
     - name: Checkout code
-      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
     - name : Run EC Validate (keyless)
       uses: ./
@@ -49,7 +49,7 @@ jobs:
         GH_TOKEN: ${{ github.token }}
 
     - name: Create New Version Release
-      uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2
+      uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2
       with:
         name: ${{ env.newVersion }} Release
         body: ""
diff --git a/.github/workflows/label-pr-size.yaml b/.github/workflows/label-pr-size.yaml
index 9946f58..226cf53 100644
--- a/.github/workflows/label-pr-size.yaml
+++ b/.github/workflows/label-pr-size.yaml
@@ -29,4 +29,4 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Label PR by size
-        uses: conforma/pr-size-label-action@v1.1.0
+        uses: conforma/pr-size-label-action@v1.2.0
diff --git a/action.yaml b/action.yaml
index fa1a843..dfa695c 100644
--- a/action.yaml
+++ b/action.yaml
@@ -33,7 +33,7 @@ runs:
 
   steps:
     - name: Run EC Validate
-      uses: docker://quay.io/conforma/cli:snapshot@sha256:ba1d8c352cebe62a1e608676b09cf77e74277dd4dc67c066f948c3580cc252b7
+      uses: docker://quay.io/conforma/cli:snapshot@sha256:f84b052fc11967e91906c6a6e66d395aafb36c42bbb04dcaee8169056491da6a
       id: ec_validate
       continue-on-error: true
       with: