diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index b4ad1f5..e1ccf5d 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -15,12 +15,12 @@ jobs:
         python-version: ["3.14"]
 
     steps:
-      - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"  # v6.0.2
+      - uses: "actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0"  # v7.0.0
         with:
           persist-credentials: false
 
       - name: "Set up Python ${{ matrix.python-version }}"
-        uses: "actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405"  # v6
+        uses: "actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1"  # v6
         with:
           python-version: "${{ matrix.python-version }}"
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 82917fc..8285993 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,12 +11,12 @@ jobs:
   build:
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"  # v6.0.2
+      - uses: "actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0"  # v7.0.0
         with:
           persist-credentials: false
 
       - name: "Set up Python"
-        uses: "actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405"  # v6
+        uses: "actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1"  # v6
         with:
           python-version: "3.12"
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index b27d803..7b10a4e 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -21,12 +21,12 @@ jobs:
           - "PySide"
 
     steps:
-      - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"  # v6.0.2
+      - uses: "actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0"  # v7.0.0
         with:
           persist-credentials: false
 
       - name: "Set up Python ${{ matrix.python-version }}"
-        uses: "actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405"  # v6
+        uses: "actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1"  # v6
         with:
           python-version: "${{ matrix.python-version }}"
 
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 389cc7d..02bb4b1 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -21,9 +21,9 @@ jobs:
       security-events: "write" # Required for upload-sarif (used by zizmor-action) to upload SARIF files.
     steps:
       - name: "Checkout repository"
-        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
+        uses: "actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0" # v7.0.0
         with:
           persist-credentials: false
 
       - name: "Run zizmor 🌈"
-        uses: "zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d" # v0.5.6
+        uses: "zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa" # v0.5.7