diff --git a/.github/workflows/buildPR.yaml b/.github/workflows/buildPR.yaml
index 556b060a..5f25d0e5 100644
--- a/.github/workflows/buildPR.yaml
+++ b/.github/workflows/buildPR.yaml
@@ -7,7 +7,7 @@ jobs:
     buildTest:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+            - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
               with:
                   fetch-depth: 0
                   persist-credentials: false
@@ -26,7 +26,7 @@ jobs:
               shell: bash
               run: |
                   echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
-            - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+            - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
               name: Setup pnpm cache
               with:
                   path: |
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 5924d1dd..59ebb6a4 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -7,7 +7,7 @@ jobs:
     publish:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+            - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
               with:
                   fetch-depth: 0
                   persist-credentials: false
@@ -35,7 +35,7 @@ jobs:
               shell: bash
               run: |
                   echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
-            - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+            - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
               name: Setup pnpm cache
               with:
                   path: |
diff --git a/.github/workflows/rennovate.yaml b/.github/workflows/rennovate.yaml
index 99fb5161..f1220d83 100644
--- a/.github/workflows/rennovate.yaml
+++ b/.github/workflows/rennovate.yaml
@@ -24,7 +24,7 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: Checkout
-              uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+              uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
             - name: Self-hosted Renovate
               uses: renovatebot/github-action@3cef36a9aba515d8726b491905b3bc766832e221 # v39.0.5
               env: