diff --git a/.github/workflows/common.yml b/.github/workflows/common.yml
index 0a33702b..e080c07a 100644
--- a/.github/workflows/common.yml
+++ b/.github/workflows/common.yml
@@ -32,7 +32,7 @@ jobs:
       DEVELOPER_DIR: "/Applications/Xcode_swift_6.3.app/Contents/Developer"
     steps:
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/pr-label-apply.yml b/.github/workflows/pr-label-apply.yml
index f3f4dd78..dc64c38f 100644
--- a/.github/workflows/pr-label-apply.yml
+++ b/.github/workflows/pr-label-apply.yml
@@ -20,7 +20,7 @@ jobs:
     
     steps:
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Download PR metadata artifact
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
@@ -39,7 +39,7 @@ jobs:
           echo "PR Number: ${PR_NUMBER}"
       
       - name: Apply labels using labeler
-        uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # v6
+        uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v6
         with:
           pr-number: ${{ steps.pr-number.outputs.number }}
           repo-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5051c1ec..cf17ea8c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -44,7 +44,7 @@ jobs:
           test -e outputs/container-package/*.pkg || (echo "Missing .pkg file!" && exit 1)
 
       - name: Create release
-        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3
         with:
           token: ${{ github.token }}
           name: ${{ github.ref_name }}-prerelease