diff --git a/.github/workflows/attest-release.yml b/.github/workflows/attest-release.yml
index 2b84406..843c884 100644
--- a/.github/workflows/attest-release.yml
+++ b/.github/workflows/attest-release.yml
@@ -65,7 +65,7 @@ jobs:
           fi
       - name: Sign release attestation with Sigstore
         id: attest
-        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-checksums: release-assets/SHA256SUMS
           predicate-type: https://in-toto.io/attestation/release/v0.2
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 24dcd74..7669b17 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -27,10 +27,10 @@ jobs:
         with:
           persist-credentials: false
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
+        uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
         with:
           languages: javascript-typescript
       - name: Analyze
-        uses: github/codeql-action/analyze@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
+        uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
         with:
           category: /language:javascript-typescript
diff --git a/.github/workflows/publish-deck.example.yml b/.github/workflows/publish-deck.example.yml
index fe6919d..10cc2fc 100644
--- a/.github/workflows/publish-deck.example.yml
+++ b/.github/workflows/publish-deck.example.yml
@@ -14,7 +14,7 @@ jobs:
         with:
           persist-credentials: false
       - id: deck
-        uses: rare/slidesfly-integrations/actions/publish@2f4a9d00bb9e9347623fbd8600eaa967b250ea33 # v0.1.1
+        uses: rare/slidesfly-integrations/actions/publish@ad290b96b6df058fcebe2f08fa7ca153cdc79f55 # v0.3.1
         with:
           file: path/to/deck.html
           api-key: ${{ secrets.SLIDESFLY_API_KEY }}
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b2a175d..c3d3e72 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -34,6 +34,6 @@ jobs:
           path: results.sarif
           retention-days: 5
       - name: Upload to code scanning
-        uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
+        uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
         with:
           sarif_file: results.sarif
diff --git a/action.yml b/action.yml
index eaa6620..83d7cb5 100644
--- a/action.yml
+++ b/action.yml
@@ -37,7 +37,7 @@ runs:
   using: composite
   steps:
     - name: Set up Node.js 22
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v7
       with:
         node-version: '22'