diff --git a/.github/workflows/audit.yaml b/.github/workflows/audit.yaml
index 50c4d4f..b06fa03 100644
--- a/.github/workflows/audit.yaml
+++ b/.github/workflows/audit.yaml
@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@v5.0.0
 
       - name: Install Ruby toolchain
-        uses: ruby/setup-ruby@0481980f17b760ef6bca5e8c55809102a0af1e5a # v1.263.0
+        uses: ruby/setup-ruby@d5126b9b3579e429dd52e51e68624dda2e05be25 # v1.267.0
         with:
           ruby-version: ".ruby-version"
           bundler-cache: true
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index bb034e2..4e467dc 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -104,7 +104,7 @@ jobs:
         uses: actions/checkout@v5.0.0
 
       - name: Install Ruby toolchain
-        uses: ruby/setup-ruby@0481980f17b760ef6bca5e8c55809102a0af1e5a # v1.263.0
+        uses: ruby/setup-ruby@d5126b9b3579e429dd52e51e68624dda2e05be25 # v1.267.0
         with:
           ruby-version: ".ruby-version"
           bundler-cache: true
@@ -120,7 +120,7 @@ jobs:
         uses: actions/checkout@v5.0.0
 
       - name: Setup Node.js runtime
-        uses: actions/setup-node@v5.0.0
+        uses: actions/setup-node@v6.0.0
         with:
           node-version: "lts/*"
 
diff --git a/.github/workflows/code-coverage.yaml b/.github/workflows/code-coverage.yaml
index da61491..67910d8 100644
--- a/.github/workflows/code-coverage.yaml
+++ b/.github/workflows/code-coverage.yaml
@@ -63,7 +63,7 @@ jobs:
         run: grcov focaccia*.profraw --source-dir . --keep-only 'src/**/*.rs' --binary-path target/debug -t covdir --filter covered -o target/coverage/coverage.json
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v5.0.0
+        uses: aws-actions/configure-aws-credentials@00943011d9042930efac3dcd3a170e4273319bc8 # v5.1.0
         if: github.ref == 'refs/heads/trunk'
         with:
           aws-region: us-west-2