diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index 6ffbf0d..670e86d 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -165,11 +165,11 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+      - uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
         with:
           languages: ${{ matrix.language }}
 
-      - uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+      - uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
         with:
           category: "/language:${{matrix.language}}"
 
diff --git a/actions/get-matrix-outputs/action.yml b/actions/get-matrix-outputs/action.yml
index 7b7b95b..2c87e60 100644
--- a/actions/get-matrix-outputs/action.yml
+++ b/actions/get-matrix-outputs/action.yml
@@ -41,7 +41,7 @@ runs:
           const artifactPath = path.join(process.env.RUNNER_TEMP, artifactName);
           core.setOutput('artifact-path', artifactPath);
 
-    - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+    - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
       with:
         path: ${{ steps.prepare-download.outputs.artifact-path }}
         pattern: ${{ steps.prepare-download.outputs.artifact-name }}-*
diff --git a/actions/set-matrix-output/action.yml b/actions/set-matrix-output/action.yml
index 90eac54..900fa9e 100644
--- a/actions/set-matrix-output/action.yml
+++ b/actions/set-matrix-output/action.yml
@@ -48,7 +48,7 @@ runs:
           core.setOutput("artifact-path", artifactPath);
           writeFileSync(artifactPath, process.env.MATRIX_VALUE ?? "");
 
-    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: ${{ steps.prepare-upload.outputs.artifact-unique-name }}
         path: ${{ steps.prepare-upload.outputs.artifact-path }}