diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7b8521be..9d398923 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,16 +12,16 @@ jobs:
       contents: write
       packages: read
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
 
-      - uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d
+      - uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ github.token }}
 
       - name: build
-        uses: devcontainers/ci@3d462823359c481c587cb7426f39775f24257115
+        uses: devcontainers/ci@7957e0cf6d027a8ab027745f399fcdbd3aa74f0f
         with:
           imageName: ghcr.io/${{ github.repository }}/devcontainer
           cacheFrom: ghcr.io/${{ github.repository }}/devcontainer
@@ -50,7 +50,7 @@ jobs:
           git push origin $TAGNAME
 
       - name: report result
-        uses: sarisia/actions-status-discord@c242b3a624337aa95f4727dd779a62f408c69e91
+        uses: sarisia/actions-status-discord@8b35962ad57c30272ae149c9ee193887b39e1b69
         if: always()
         with:
           webhook: ${{ secrets.DISCORD_WEBHOOK }}
@@ -76,7 +76,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
         with:
           ref: ${{ github.ref_name }}
 
@@ -106,7 +106,7 @@ jobs:
       - uses: sarisia/actions/conclusion@main
         id: ghapi
 
-      - uses: sarisia/actions-status-discord@c242b3a624337aa95f4727dd779a62f408c69e91
+      - uses: sarisia/actions-status-discord@8b35962ad57c30272ae149c9ee193887b39e1b69
         if: always()
         with:
           webhook: ${{ secrets.DISCORD_WEBHOOK }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 1c7bb464..cda73bbd 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -11,16 +11,16 @@ jobs:
       packages: read
       contents: read
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
 
-      - uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d
+      - uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ github.token }}
 
       - name: build
-        uses: devcontainers/ci@3d462823359c481c587cb7426f39775f24257115
+        uses: devcontainers/ci@7957e0cf6d027a8ab027745f399fcdbd3aa74f0f
         with:
           imageName: ghcr.io/${{ github.repository }}/devcontainer
           cacheFrom: ghcr.io/${{ github.repository }}/devcontainer
@@ -31,7 +31,7 @@ jobs:
             npm run build
 
       - name: report result
-        uses: sarisia/actions-status-discord@c242b3a624337aa95f4727dd779a62f408c69e91
+        uses: sarisia/actions-status-discord@8b35962ad57c30272ae149c9ee193887b39e1b69
         if: always()
         with:
           webhook: ${{ secrets.DISCORD_WEBHOOK }}