diff --git a/.github/workflows/release-qualification.yml b/.github/workflows/release-qualification.yml
index 6862aa6..23d3ec1 100644
--- a/.github/workflows/release-qualification.yml
+++ b/.github/workflows/release-qualification.yml
@@ -123,7 +123,7 @@ jobs:
 
       # v7.0.1 — 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
       - name: Download installers
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
         with:
           name: windows-installers
           # download-artifact resolves relative to the workspace root while job
@@ -226,7 +226,7 @@ jobs:
 
       # v7.0.1 — 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
       - name: Download installers
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
         with:
           name: windows-installers
           # download-artifact resolves relative to the workspace root while job
@@ -377,7 +377,7 @@ jobs:
 
       # v7.0.1 — 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
       - name: Download installers
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
         with:
           name: windows-installers
           path: sys-monitor-tauri/bundle-artifacts
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 853728d..e064bc5 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -59,7 +59,7 @@ jobs:
       # Version stays pinned at 0.22.1 exactly as before.
       # v2.86.7 — b6ff580856c41316412a0b9b60540fbc6f8c82cc
       - name: Install pinned cargo-audit (prebuilt)
-        uses: taiki-e/install-action@b6ff580856c41316412a0b9b60540fbc6f8c82cc
+        uses: taiki-e/install-action@742a3317eac7bd62f91cd888b4eead5e784ba833
         with:
           tool: cargo-audit@0.22.1