diff --git a/.github/workflows/gh_pages_ci.yaml b/.github/workflows/gh_pages_ci.yaml
index 7116da68cd75..d5e3efc856dd 100644
--- a/.github/workflows/gh_pages_ci.yaml
+++ b/.github/workflows/gh_pages_ci.yaml
@@ -40,7 +40,7 @@ jobs:
       - name: Prebuild actions
         run: ./website/prebuild.py
       - name: Setup Ruby
-        uses: ruby/setup-ruby@6ca151fd1bfcfd6fe0c4eb6837eb0584d0134a0c # v1.290.0
+        uses: ruby/setup-ruby@7f797815d8adceb1c412e7abefdd1ab4abc47a5f # v1.335.0
         with:
           # Runs 'bundle install' and caches installed gems automatically.
           bundler-cache: true
diff --git a/.github/workflows/gh_pages_deploy.yaml b/.github/workflows/gh_pages_deploy.yaml
index 2186509ddaf3..4ae005ec2a7b 100644
--- a/.github/workflows/gh_pages_deploy.yaml
+++ b/.github/workflows/gh_pages_deploy.yaml
@@ -47,7 +47,7 @@ jobs:
       - name: Setup Pages
         uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5.0.0
       - name: Setup Ruby
-        uses: ruby/setup-ruby@6ca151fd1bfcfd6fe0c4eb6837eb0584d0134a0c # v1.290.0
+        uses: ruby/setup-ruby@7f797815d8adceb1c412e7abefdd1ab4abc47a5f # v1.335.0
         with:
           # Runs 'bundle install' and caches installed gems automatically.
           bundler-cache: true
diff --git a/.github/workflows/prek.yaml b/.github/workflows/prek.yaml
index 7030879723b6..7cc2d31701e6 100644
--- a/.github/workflows/prek.yaml
+++ b/.github/workflows/prek.yaml
@@ -76,7 +76,7 @@ jobs:
           mkdir -p prek-output
           git diff > prek-output/diff
           cp $GITHUB_EVENT_PATH prek-output/event
-      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: failure()
         with:
           name: prek output
diff --git a/.github/workflows/prek_suggestions.yaml b/.github/workflows/prek_suggestions.yaml
index 1d9c11ee43da..82c8dbb2c17a 100644
--- a/.github/workflows/prek_suggestions.yaml
+++ b/.github/workflows/prek_suggestions.yaml
@@ -44,7 +44,7 @@ jobs:
             raw.githubusercontent.com:443
             release-assets.githubusercontent.com:443
 
-      - uses: reviewdog/action-setup@3f401fe1d58fe77e10d665ab713057375e39b887 # v1.3.0
+      - uses: reviewdog/action-setup@d8a7baabd7f3e8544ee4dbde3ee41d0011c3a93f # v1.5.0
         with:
           reviewdog_version: latest
 
@@ -53,7 +53,7 @@ jobs:
           persist-credentials: false
 
       - name: Download prek output
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: prek output
           github-token: ${{ secrets.GITHUB_TOKEN }}