diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index e4ecf29c..9e7488eb 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -427,7 +427,7 @@ jobs:
           path: ./artifacts
 
       - name: Create GitHub Release with assets
-        uses: softprops/action-gh-release@1853d73993c8ca1b2c9c1a7fede39682d0ab5c2a  # v2
+        uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe  # v2
         with:
           tag_name: ${{ needs.prepare-version.outputs.tag_name }}
           name: Release ${{ needs.prepare-version.outputs.version }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6e42a352..7d4b7730 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -116,7 +116,7 @@ jobs:
 
       - name: Upload coverage reports to Codecov
         if: runner.os == 'Linux' && matrix.python-version == '3.12'
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de  # v5
+        uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad  # v5
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: ./coverage.xml