diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 438fe56..3783686 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -30,12 +30,12 @@ jobs:
 
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8" # v6
+        uses: "actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803" # v6
         with:
           show-progress: false
 
       - name: "Install PHP"
-        uses: "shivammathur/setup-php@0f7f1d08e3e32076e51cae65eb0b0c871405b16e" # v2
+        uses: "shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240" # v2
         with:
           php-version: "${{ matrix.php-version }}"
           ini-values: memory_limit=-1
diff --git a/.github/workflows/conventional-commits.yaml b/.github/workflows/conventional-commits.yaml
index 438e81e..ed15513 100644
--- a/.github/workflows/conventional-commits.yaml
+++ b/.github/workflows/conventional-commits.yaml
@@ -20,7 +20,7 @@ jobs:
     steps:
       - name: "Checkout"
         if: ${{ github.event_name == 'pull_request' }}
-        uses: "actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8" # v6
+        uses: "actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803" # v6
         with:
           show-progress: false
 
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index c8c5078..66ea726 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: [ubuntu-slim]
     name: Release Automation
     steps:
-      - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3
+      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
         id: generate-token
         with:
           client-id: ${{ secrets.LENDABOT_APP_ID }}