diff --git a/.github/workflows/generate-references.yml b/.github/workflows/generate-references.yml
index dabe93b..95a4620 100644
--- a/.github/workflows/generate-references.yml
+++ b/.github/workflows/generate-references.yml
@@ -35,7 +35,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup .NET
-        uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5.1.0
+        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0
         with:
           dotnet-version: "10.0.x"
 
@@ -193,13 +193,13 @@ jobs:
 
       - name: Attest Build Provenance
         if: env.SKIP_WORKFLOW != 'true'
-        uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f
+        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32
         with:
           subject-path: output/packages/${{ env.PACKAGE_NAME }}.nupkg
 
       - name: Upload Package Artifact
         if: env.SKIP_WORKFLOW != 'true'
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: reference-package-${{ env.BUILD_VERSION }}
           path: output/packages/*.nupkg
@@ -207,7 +207,7 @@ jobs:
 
       - name: Upload DLLs Artifact
         if: env.SKIP_WORKFLOW != 'true'
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: stripped-dlls-${{ env.BUILD_VERSION }}
           path: output/dlls/*.dll