diff --git a/.github/workflows/buildPR.yaml b/.github/workflows/buildPR.yaml
index 1c935216..c5a5199e 100644
--- a/.github/workflows/buildPR.yaml
+++ b/.github/workflows/buildPR.yaml
@@ -8,11 +8,11 @@ jobs:
     buildTest:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+            - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
               with:
                   fetch-depth: 0
                   persist-credentials: false
-            - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
+            - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4
               with:
                   node-version: "18"
 
diff --git a/.github/workflows/lintPrTitle.yaml b/.github/workflows/lintPrTitle.yaml
index 8e6d6672..7ddea687 100644
--- a/.github/workflows/lintPrTitle.yaml
+++ b/.github/workflows/lintPrTitle.yaml
@@ -15,6 +15,6 @@ jobs:
         steps:
             # Please look up the latest version from
             # https://github.com/amannn/action-semantic-pull-request/releases
-            - uses: amannn/action-semantic-pull-request@e9fabac35e210fea40ca5b14c0da95a099eff26f # v5
+            - uses: amannn/action-semantic-pull-request@0723387faaf9b38adef4775cd42cfd5155ed6017 # v5
               env:
                   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 6cb34f00..c6235014 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -7,7 +7,7 @@ jobs:
     publish:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+            - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
               with:
                   fetch-depth: 0
                   persist-credentials: false
@@ -20,7 +20,7 @@ jobs:
                       ${{ secrets.NBL_DEPLOY_KEY }}
                       ${{ secrets.USEMILLER_DEPLOY_KEY }}
 
-            - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
+            - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4
               with:
                   node-version: "18"
 
diff --git a/.github/workflows/rennovate.yaml b/.github/workflows/rennovate.yaml
index 76fb49c8..b10e1c18 100644
--- a/.github/workflows/rennovate.yaml
+++ b/.github/workflows/rennovate.yaml
@@ -26,7 +26,7 @@ jobs:
             - name: Checkout
               uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
             - name: Self-hosted Renovate
-              uses: renovatebot/github-action@2e021d24483d81e77e0e902d0809adfbfff276fc # v40.1.10
+              uses: renovatebot/github-action@0c94129d48b4e92addf23686b8a735b3057a0448 # v40.2.5
               env:
                   RENOVATE_REPOSITORIES: ${{ github.repository }}
                   RENOVATE_PLATFORM_COMMIT: "true"