diff --git a/.github/setup_evap/action.yml b/.github/setup_evap/action.yml
index b8be2e4a40..3878e7a122 100644
--- a/.github/setup_evap/action.yml
+++ b/.github/setup_evap/action.yml
@@ -23,7 +23,7 @@ runs:
   using: "composite"
   steps:
     - name: Install nix
-      uses: cachix/install-nix-action@96951a368ba55167b55f1c916f7d416bac6505fe # v31
+      uses: cachix/install-nix-action@ab739621df7a23f52766f9ccc97f38da6b7af14f # v31
     - name: Restore and save Nix store
       uses: nix-community/cache-nix-action@7df957e333c1e5da7721f60227dbba6d06080569 # v7
       with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fe1c9c8c95..b630dc1789 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -23,4 +23,4 @@ jobs:
       - run: tar tvf dist/*.tar.gz
       - run: unzip -l dist/*.whl
       - name: Publish package distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index b0fa5dbb1e..f265733437 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -77,7 +77,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           submodules: true
-      - uses: cachix/install-nix-action@96951a368ba55167b55f1c916f7d416bac6505fe # v31
+      - uses: cachix/install-nix-action@ab739621df7a23f52766f9ccc97f38da6b7af14f # v31
       - uses: nix-community/cache-nix-action@7df957e333c1e5da7721f60227dbba6d06080569 # v7
         with:
           primary-key: nix-${{ runner.os }}-${{ hashFiles('**/*.nix', 'flake.lock', 'uv.lock', 'evap/development/manage_autocompletion.sh') }}-build_wheel
@@ -87,7 +87,7 @@ jobs:
       - run: tar tvf dist/*.tar.gz
       - run: unzip -l dist/*.whl
       - run: nix run .#check_dist -- pyproject.toml dist/*.whl
-      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: wheel
           path: dist/
@@ -221,7 +221,7 @@ jobs:
           repository: e-valuation/evap-deployment
           path: deployment
 
-      - uses: cachix/install-nix-action@96951a368ba55167b55f1c916f7d416bac6505fe # v31
+      - uses: cachix/install-nix-action@ab739621df7a23f52766f9ccc97f38da6b7af14f # v31
       - name: Start database
         working-directory: deployment
         run: nix run ../main#services -- --detached