diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml
index a86d2e9..026a23f 100644
--- a/.github/workflows/pre-release.yml
+++ b/.github/workflows/pre-release.yml
@@ -75,7 +75,7 @@ jobs:
           fi
 
       - name: Install git-cliff
-        uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # 2.87.28
+        uses: taiki-e/install-action@a4d3f3f761dcd95cce1b72cb61cb6d1963438177 # 2.87.30
         with:
           tool: git-cliff
 
diff --git a/.github/workflows/security-codeql.yml b/.github/workflows/security-codeql.yml
index f723018..74c4d7f 100644
--- a/.github/workflows/security-codeql.yml
+++ b/.github/workflows/security-codeql.yml
@@ -61,7 +61,7 @@ jobs:
             libwayland-dev \
             libxkbcommon-dev
 
-      - uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
+      - uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           languages: cpp
           # Manual build mode: we control exactly what gets compiled and analyzed.
@@ -82,6 +82,6 @@ jobs:
       - name: Build
         run: cmake --build build --parallel
 
-      - uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
+      - uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           category: "/language:cpp"