diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index 0cb26f9..c76bf09 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -70,7 +70,7 @@ jobs:
           - version: "1.10"
             os: windows-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
 
@@ -105,7 +105,7 @@ jobs:
           depwarn: "yes"
       - uses: julia-actions/julia-processcoverage@03114f09f119417c3242a9fb6e0b722676aedf38 # v1.2.2
         if: matrix.os == 'ubuntu-latest' && matrix.version == '1.11'
-      - uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
+      - uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
         if: matrix.os == 'ubuntu-latest' && matrix.version == '1.11'
         with:
           verbose: true
@@ -118,7 +118,7 @@ jobs:
     timeout-minutes: 20
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
       - uses: julia-actions/setup-julia@5c9647d97b78a5debe5164e9eec09d653d29bd71 # v2.6.1
diff --git a/.github/workflows/EnforceChangelog.yml b/.github/workflows/EnforceChangelog.yml
index 832b50a..6160881 100644
--- a/.github/workflows/EnforceChangelog.yml
+++ b/.github/workflows/EnforceChangelog.yml
@@ -7,7 +7,7 @@ jobs:
   changelog:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - uses: julia-actions/setup-julia@5c9647d97b78a5debe5164e9eec09d653d29bd71 # v2.6.1
         with:
           version: '1'
diff --git a/.github/workflows/TagBot.yml b/.github/workflows/TagBot.yml
index 3718262..80090f2 100644
--- a/.github/workflows/TagBot.yml
+++ b/.github/workflows/TagBot.yml
@@ -25,6 +25,6 @@ jobs:
     if: github.event_name == 'workflow_dispatch' || github.actor == 'JuliaTagBot'
     runs-on: ubuntu-latest
     steps:
-      - uses: JuliaRegistries/TagBot@62dd7cd21dcde087eca10e70c3fc3f8cefbe44a2 # v1.20.2
+      - uses: JuliaRegistries/TagBot@553720ecd072a176ef901656bf96c3080cd47b2e # v1.20.3
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/VendorUpdater.yml b/.github/workflows/VendorUpdater.yml
index 53b1006..0749b4a 100644
--- a/.github/workflows/VendorUpdater.yml
+++ b/.github/workflows/VendorUpdater.yml
@@ -10,7 +10,7 @@ jobs:
   VendorUpdater:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false