diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 39febe8..ca94cb1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,7 +33,7 @@ jobs:
             - name: Setup pnpm
               uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
             - name: Use Node.js 24
-              uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+              uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
               with:
                   node-version: 24
                   check-latest: true
@@ -58,7 +58,7 @@ jobs:
             - name: Setup pnpm
               uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
             - name: Use Node.js 24
-              uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+              uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
               with:
                   node-version: 24
                   check-latest: true
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index aae3913..0b33a49 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -37,11 +37,11 @@ jobs:
               with:
                   persist-credentials: false
             - name: Initialize CodeQL
-              uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4
+              uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
               with:
                   languages: ${{ matrix.language }}
                   queries: security-extended
             - name: Perform CodeQL Analysis
-              uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4
+              uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
               with:
                   category: "/language:${{ matrix.language }}"