diff --git a/.github/workflows/md.yml b/.github/workflows/md.yml
index 46ee756..fd98868 100644
--- a/.github/workflows/md.yml
+++ b/.github/workflows/md.yml
@@ -22,7 +22,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: qltysh/qlty-action/install@a19242102d17e497f437d7466aa01b528537e899 # v2.2.0
+      - uses: qltysh/qlty-action/install@fd52dc852530a708d68c3b7342f8d33d1df4cd55 # v2.2.1
 
       - name: Lint + format check (markdownlint)
         run: qlty check --all --filter=markdownlint
diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml
index 33fb440..6625d19 100644
--- a/.github/workflows/php.yml
+++ b/.github/workflows/php.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Install dependencies
         run: composer install --no-interaction --prefer-dist
 
-      - uses: qltysh/qlty-action/install@a19242102d17e497f437d7466aa01b528537e899 # v2.2.0
+      - uses: qltysh/qlty-action/install@fd52dc852530a708d68c3b7342f8d33d1df4cd55 # v2.2.1
 
       - name: Lint (phpstan)
         run: qlty check --all --no-formatters --filter=phpstan
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 03721c6..7c3c3f2 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -22,7 +22,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      - uses: qltysh/qlty-action/install@a19242102d17e497f437d7466aa01b528537e899 # v2.2.0
+      - uses: qltysh/qlty-action/install@fd52dc852530a708d68c3b7342f8d33d1df4cd55 # v2.2.1
 
       - name: Security scan
         run: qlty check --all --no-formatters --filter=gitleaks,trivy,bandit,osv-scanner
diff --git a/.github/workflows/test-php.yml b/.github/workflows/test-php.yml
index b9219ee..dfac4c3 100644
--- a/.github/workflows/test-php.yml
+++ b/.github/workflows/test-php.yml
@@ -39,7 +39,7 @@ jobs:
 
       - name: Upload coverage to Qlty
         if: matrix.php-version == '8.6'
-        uses: qltysh/qlty-action/coverage@a19242102d17e497f437d7466aa01b528537e899 # v2.2.0
+        uses: qltysh/qlty-action/coverage@fd52dc852530a708d68c3b7342f8d33d1df4cd55 # v2.2.1
         with:
           coverage-token: ${{ secrets.QLTY_COVERAGE_TOKEN }}
           files: coverage/clover.xml