diff --git a/.github/workflows/dco-check.yml b/.github/workflows/dco-check.yml
index dd4bb832..dae84fc5 100644
--- a/.github/workflows/dco-check.yml
+++ b/.github/workflows/dco-check.yml
@@ -44,7 +44,7 @@ jobs:
           fi
 
       - name: Checkout code
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
           # Use different refs based on the event type
@@ -53,13 +53,13 @@ jobs:
                   '' }}
 
       - name: Set up Node.js
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 'lts/*'
 
       - name: Check DCO compliance and comment on PR
         id: dco-check
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           # Configurable list of GitHub usernames exempt from DCO requirements
           ALLOWED_USERS: "dependabot[bot],dependabot,step-security-bot,github-actions[bot],github-actions,copilot-pr-agent[bot],copilot-pr-agent,copilot-server-agent[bot],copilot-server-agent,github-copilot[bot],github-copilot,copilot-swe-agent[bot],copilot-swe-agent,copilot,Copilot"