diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 82b34566..4953427a 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -25,4 +25,4 @@ jobs:
         uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v4.1.3
 
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@56339e523c0409420f6c2c9a2f4292bbb3c07dd3 # v4.8.0
+        uses: actions/dependency-review-action@40c09b7dc99638e5ddb0bfd91c1673effc064d8a # v4.8.1
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 953934a6..c7af6ef3 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -46,7 +46,7 @@ jobs:
           cd ${{ inputs.repo }} && make check-diff
 
       - name: Commit reviewable diff
-        uses: stefanzweifel/git-auto-commit-action@778341af668090896ca464160c2def5d1d1a3eb0 # v6
+        uses: stefanzweifel/git-auto-commit-action@28e16e81777b558cc906c8750092100bbb34c5e3 # v6
         if: failure() && steps.ensure-reviewable.outcome == 'failure'
         with:
           commit_message: "ci: make reviewable"