diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index dcff43e..704ed07 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -39,7 +39,7 @@ jobs:
         steps:
             - uses: "actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683"
             - name: "Use Deno ${{ matrix.deno-version }}"
-              uses: "denoland/setup-deno@4606d5cc6fb3f673efd4f594850e3f4b3e9d29cd"
+              uses: "denoland/setup-deno@909cc5acb0fdd60627fb858598759246509fa755"
               with: { deno-version: "v${{ matrix.deno-version }}" }
             - run: "deno install"
             - run: "deno task lint"
diff --git a/.github/workflows/sast.yml b/.github/workflows/sast.yml
index 607f877..9e9568a 100644
--- a/.github/workflows/sast.yml
+++ b/.github/workflows/sast.yml
@@ -32,12 +32,12 @@ jobs:
                   results_file: "results.sarif"
                   results_format: "sarif"
                   publish_results: true
-            - uses: "actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b"
+            - uses: "actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08"
               with:
                   name: "SARIF file"
                   path: "results.sarif"
                   retention-days: 5
-            - uses: "github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169"
+            - uses: "github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c"
               with:
                   sarif_file: "results.sarif"
 
@@ -51,7 +51,7 @@ jobs:
 
         steps:
             - uses: "actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683"
-            - uses: "github/codeql-action/init@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169"
+            - uses: "github/codeql-action/init@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c"
               with:
                   languages: "typescript"
             - uses: "pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2"
@@ -62,4 +62,4 @@ jobs:
                   node-version-file: ".nvmrc"
                   cache: "pnpm"
             - run: "make install"
-            - uses: "github/codeql-action/analyze@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169"
+            - uses: "github/codeql-action/analyze@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c"