diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fe7dc57..3e9da14 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ permissions: {}
 
 jobs:
   check:
-    uses: devenvy/ffmpeg-build/.github/workflows/check.yml@52201a1204772caf79156ced0954c25407f6b433 # v0.0.5
+    uses: devenvy/ffmpeg-build/.github/workflows/check.yml@f8b45a38a7b7b63f2697a45ee608103f24c874ea # v0.0.9
     permissions:
       contents: read
   # the workflows: actionlint (mistakes) and zizmor (GitHub Actions security)
@@ -50,7 +50,7 @@ jobs:
         run: test "${CHECK}" = success && test "${LINT}" = success
   merge:
     needs: result
-    uses: devenvy/ffmpeg-build/.github/workflows/automerge.yml@52201a1204772caf79156ced0954c25407f6b433 # v0.0.5
+    uses: devenvy/ffmpeg-build/.github/workflows/automerge.yml@f8b45a38a7b7b63f2697a45ee608103f24c874ea # v0.0.9
     permissions:
       contents: write
       pull-requests: write
@@ -64,7 +64,7 @@ jobs:
     permissions: {}
     steps:
       - id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.DEVENVY_BOT_CLIENT_ID }}
           private-key: ${{ secrets.DEVENVY_BOT_PRIVATE_KEY }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f992bf2..8776ccd 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,7 +12,7 @@ permissions: {}
 
 jobs:
   release:
-    uses: devenvy/ffmpeg-build/.github/workflows/build.yml@52201a1204772caf79156ced0954c25407f6b433 # v0.0.5
+    uses: devenvy/ffmpeg-build/.github/workflows/build.yml@f8b45a38a7b7b63f2697a45ee608103f24c874ea # v0.0.9
     permissions:
       contents: write # the GitHub releases
     with:
diff --git a/.github/workflows/update-lock.yml b/.github/workflows/update-lock.yml
index 32699ea..773b97f 100644
--- a/.github/workflows/update-lock.yml
+++ b/.github/workflows/update-lock.yml
@@ -14,7 +14,7 @@ permissions: {}
 
 jobs:
   update:
-    uses: devenvy/ffmpeg-build/.github/workflows/update-lock.yml@52201a1204772caf79156ced0954c25407f6b433 # v0.0.5
+    uses: devenvy/ffmpeg-build/.github/workflows/update-lock.yml@f8b45a38a7b7b63f2697a45ee608103f24c874ea # v0.0.9
     permissions:
       actions: write
       contents: write