diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index cb7b98f8f..99272e408 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -45,7 +45,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         ref: ${{ inputs.ref }}
         persist-credentials: false
@@ -56,7 +56,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+      uses: github/codeql-action/init@e12f0178983d466f2f6028f5cc7a6d786fd97f4b # v4.31.4
       with:
         languages: ${{ matrix.language }}
         build-mode: none
@@ -72,6 +72,6 @@ jobs:
         pip install -e .
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+      uses: github/codeql-action/analyze@e12f0178983d466f2f6028f5cc7a6d786fd97f4b # v4.31.4
       with:
         category: "/language:${{ matrix.language }}"
diff --git a/.github/workflows/dist.yml b/.github/workflows/dist.yml
index 9c61ba428..33a5e2240 100644
--- a/.github/workflows/dist.yml
+++ b/.github/workflows/dist.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     environment: release
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
       with:
         ref: ${{ inputs.ref }}
         persist-credentials: false
diff --git a/.github/workflows/linters.yml b/.github/workflows/linters.yml
index f16a13d41..144bde09d 100644
--- a/.github/workflows/linters.yml
+++ b/.github/workflows/linters.yml
@@ -12,7 +12,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           persist-credentials: false
       - uses: actions/setup-python@v6
@@ -32,7 +32,7 @@ jobs:
     name: Docs Checks
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           persist-credentials: false
       - uses: actions/setup-python@v6
diff --git a/.github/workflows/test-python-atlas.yml b/.github/workflows/test-python-atlas.yml
index e98d2512d..643ec0424 100644
--- a/.github/workflows/test-python-atlas.yml
+++ b/.github/workflows/test-python-atlas.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout django-mongodb-backend
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: install django-mongodb-backend
@@ -30,7 +30,7 @@ jobs:
           pip3 install --upgrade pip
           pip3 install -e .
       - name: Checkout Django
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           repository: 'mongodb-forks/django'
           ref: 'mongodb-5.2.x'
diff --git a/.github/workflows/test-python-geo.yml b/.github/workflows/test-python-geo.yml
index 309f3506a..2b18ec867 100644
--- a/.github/workflows/test-python-geo.yml
+++ b/.github/workflows/test-python-geo.yml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout django-mongodb-backend
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: install django-mongodb-backend
@@ -31,7 +31,7 @@ jobs:
           pip3 install --upgrade pip
           pip3 install -e .
       - name: Checkout Django
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           repository: 'mongodb-forks/django'
           ref: 'mongodb-5.2.x'
@@ -51,7 +51,7 @@ jobs:
       - name: Copy the test runner file
         run: cp .github/workflows/runtests.py django_repo/tests/runtests_.py
       - name: Start MongoDB
-        uses: supercharge/mongodb-github-action@90004df786821b6308fb02299e5835d0dae05d0d # 1.12.0
+        uses: supercharge/mongodb-github-action@315db7fe45ac2880b7758f1933e6e5d59afd5e94 # 1.12.1
         with:
           mongodb-version: 6.0
       - name: Run tests
diff --git a/.github/workflows/test-python.yml b/.github/workflows/test-python.yml
index 7f74b3376..47d7c523e 100644
--- a/.github/workflows/test-python.yml
+++ b/.github/workflows/test-python.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout django-mongodb-backend
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: install django-mongodb-backend
@@ -30,7 +30,7 @@ jobs:
           pip3 install --upgrade pip
           pip3 install -e .
       - name: Checkout Django
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           repository: 'mongodb-forks/django'
           ref: 'mongodb-5.2.x'
@@ -50,7 +50,7 @@ jobs:
       - name: Copy the test runner file
         run: cp .github/workflows/runtests.py django_repo/tests/runtests_.py
       - name: Start MongoDB
-        uses: supercharge/mongodb-github-action@90004df786821b6308fb02299e5835d0dae05d0d # 1.12.0
+        uses: supercharge/mongodb-github-action@315db7fe45ac2880b7758f1933e6e5d59afd5e94 # 1.12.1
         with:
           mongodb-version: 6.0
       - name: Run tests
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 30cab7de5..f5a8d0a3c 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -14,8 +14,8 @@ jobs:
       security-events: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@e673c3917a1aef3c65c972347ed84ccd013ecda4 # v0.2.0
+        uses: zizmorcore/zizmor-action@e639db99335bc9038abc0e066dfcd72e23d26fb4 # v0.3.0