diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 125e07f..cb786d1 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -8,9 +8,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
       - name: node
-        uses: actions/setup-node@ad1b57eb8159e2fd3cc753317dd4a4016287218f
+        uses: actions/setup-node@f4a67bbeca970f103397d3d2b9462cf787cd2980
         with:
           node-version: 24
       - name: bun
diff --git a/.github/workflows/devskim.yaml b/.github/workflows/devskim.yaml
index efd595d..a9f75bc 100644
--- a/.github/workflows/devskim.yaml
+++ b/.github/workflows/devskim.yaml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
       - name: analysis
         uses: microsoft/DevSkim-Action@4b5047945a44163b94642a1cecc0d93a3f428cc6
       - name: upload