diff --git a/.github/workflows/cron-zizmor.yml b/.github/workflows/cron-zizmor.yml
index ccdf144..c3e14b7 100644
--- a/.github/workflows/cron-zizmor.yml
+++ b/.github/workflows/cron-zizmor.yml
@@ -30,7 +30,7 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
+        uses: github/codeql-action/upload-sarif@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
         with:
           sarif_file: results.sarif
           category: zizmor
diff --git a/.github/workflows/unit.yml b/.github/workflows/unit.yml
index 6728450..7ccbf92 100644
--- a/.github/workflows/unit.yml
+++ b/.github/workflows/unit.yml
@@ -36,7 +36,7 @@ jobs:
           rustup default nightly
 
       - name: Install latest cargo-nextest release
-        uses: taiki-e/install-action@58e862542551f667fa44c8a2a4a1d64ad477c96a # v2.75.17
+        uses: taiki-e/install-action@b550161ef8a7bc4f2a671c0b03a18ac9ccedea1e # v2.79.1
         with:
           tool: nextest