diff --git a/.github/workflows/buildPR.yaml b/.github/workflows/buildPR.yaml
index 1c935216..af8bfb25 100644
--- a/.github/workflows/buildPR.yaml
+++ b/.github/workflows/buildPR.yaml
@@ -8,11 +8,11 @@ jobs:
     buildTest:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+            - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
               with:
                   fetch-depth: 0
                   persist-credentials: false
-            - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
+            - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
               with:
                   node-version: "18"
 
@@ -27,7 +27,7 @@ jobs:
               shell: bash
               run: |
                   echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
-            - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
+            - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4
               name: Setup pnpm cache
               with:
                   path: |
diff --git a/.github/workflows/lintPrTitle.yaml b/.github/workflows/lintPrTitle.yaml
index 8e6d6672..7ddea687 100644
--- a/.github/workflows/lintPrTitle.yaml
+++ b/.github/workflows/lintPrTitle.yaml
@@ -15,6 +15,6 @@ jobs:
         steps:
             # Please look up the latest version from
             # https://github.com/amannn/action-semantic-pull-request/releases
-            - uses: amannn/action-semantic-pull-request@e9fabac35e210fea40ca5b14c0da95a099eff26f # v5
+            - uses: amannn/action-semantic-pull-request@0723387faaf9b38adef4775cd42cfd5155ed6017 # v5
               env:
                   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 6cb34f00..68d26da6 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -7,7 +7,7 @@ jobs:
     publish:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+            - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
               with:
                   fetch-depth: 0
                   persist-credentials: false
@@ -20,7 +20,7 @@ jobs:
                       ${{ secrets.NBL_DEPLOY_KEY }}
                       ${{ secrets.USEMILLER_DEPLOY_KEY }}
 
-            - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
+            - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
               with:
                   node-version: "18"
 
@@ -35,7 +35,7 @@ jobs:
               shell: bash
               run: |
                   echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
-            - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
+            - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4
               name: Setup pnpm cache
               with:
                   path: |
diff --git a/.github/workflows/rennovate.yaml b/.github/workflows/rennovate.yaml
index 76fb49c8..0cc68c6c 100644
--- a/.github/workflows/rennovate.yaml
+++ b/.github/workflows/rennovate.yaml
@@ -24,9 +24,9 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: Checkout
-              uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
             - name: Self-hosted Renovate
-              uses: renovatebot/github-action@2e021d24483d81e77e0e902d0809adfbfff276fc # v40.1.10
+              uses: renovatebot/github-action@0984fb80fc633b17e57f3e8b6c007fe0dc3e0d62 # v40.3.6
               env:
                   RENOVATE_REPOSITORIES: ${{ github.repository }}
                   RENOVATE_PLATFORM_COMMIT: "true"