diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 370c167..ef51676 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -25,7 +25,7 @@ jobs:
         sdk: [3.9, dev]
 
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
       - uses: dart-lang/setup-dart@e51d8e571e22473a2ddebf0ef8a2123f0ab2c02c
         with:
           sdk: ${{ matrix.sdk }}
@@ -45,7 +45,7 @@ jobs:
           dart pub global activate coverage
           dart pub global run coverage:test_with_coverage
         if: matrix.sdk == 'dev'
-      - uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b
+      - uses: coverallsapp/github-action@5cbfd81b66ca5d10c19b062c04de0199c215fb6e
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           path-to-lcov: ./coverage/lcov.info
diff --git a/.github/workflows/no-response.yml b/.github/workflows/no-response.yml
index 125ca0b..bcaeb34 100644
--- a/.github/workflows/no-response.yml
+++ b/.github/workflows/no-response.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.repository_owner == 'google' }}
     steps:
-      - uses: actions/stale@3a9db7e6a41a89f618792c92c0e97cc736e1b13f
+      - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008
         with:
           # Don't automatically mark inactive issues+PRs as stale.
           days-before-stale: -1