diff --git a/.github/workflows/codeql-actions.yaml b/.github/workflows/codeql-actions.yaml
index 0345860..2b57219 100644
--- a/.github/workflows/codeql-actions.yaml
+++ b/.github/workflows/codeql-actions.yaml
@@ -61,7 +61,7 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
         with:
           languages: actions
           build-mode: none
@@ -69,6 +69,6 @@ jobs:
           config-file: ${{ inputs.config-file }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
         with:
           category: "/language:actions"
diff --git a/.github/workflows/codeql-go.yaml b/.github/workflows/codeql-go.yaml
index 9e05bfb..dd81d80 100644
--- a/.github/workflows/codeql-go.yaml
+++ b/.github/workflows/codeql-go.yaml
@@ -100,7 +100,7 @@ jobs:
 
       - name: Initialize CodeQL
         if: steps.detect.outputs.found == 'true'
-        uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
         with:
           languages: go
           build-mode: manual
@@ -128,6 +128,6 @@ jobs:
 
       - name: Perform CodeQL Analysis
         if: steps.detect.outputs.found == 'true'
-        uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
         with:
           category: "/language:go"
diff --git a/.github/workflows/codeql-javascript.yaml b/.github/workflows/codeql-javascript.yaml
index f1a74b0..4da8141 100644
--- a/.github/workflows/codeql-javascript.yaml
+++ b/.github/workflows/codeql-javascript.yaml
@@ -62,7 +62,7 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
         with:
           # `javascript-typescript` covers both .js and .ts in one extractor.
           languages: javascript-typescript
@@ -71,6 +71,6 @@ jobs:
           config-file: ${{ inputs.config-file }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
         with:
           category: "/language:javascript-typescript"
diff --git a/.github/workflows/codeql-python.yaml b/.github/workflows/codeql-python.yaml
index ca631ac..b313ca1 100644
--- a/.github/workflows/codeql-python.yaml
+++ b/.github/workflows/codeql-python.yaml
@@ -60,7 +60,7 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
         with:
           languages: python
           build-mode: none
@@ -68,6 +68,6 @@ jobs:
           config-file: ${{ inputs.config-file }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
         with:
           category: "/language:python"