diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 0edabd8..2bfe009 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -35,7 +35,7 @@ jobs:
 
     # https://github.com/gradle/actions/tree/main/setup-gradle
     - name: 'Set up Gradle'
-      uses: 'gradle/actions/setup-gradle@8c3e41f260befbc98f487996e8806e3d51f655c4' # v4.2.2
+      uses: 'gradle/actions/setup-gradle@dcf3ce7005266cbc66ccc8835972f105db0797e5' # v4.2.2
       with:
         gradle-version: 'wrapper'
         gradle-home-cache-cleanup: true
@@ -43,7 +43,7 @@ jobs:
 
     # https://github.com/gradle/actions/tree/main/dependency-submission
     - name: "Generate and submit dependency graph"
-      uses: "gradle/actions/dependency-submission@8c3e41f260befbc98f487996e8806e3d51f655c4" # v4.2.2
+      uses: "gradle/actions/dependency-submission@dcf3ce7005266cbc66ccc8835972f105db0797e5" # v4.2.2
       env:
         DEPENDENCY_GRAPH_EXCLUDE_PROJECTS: "^:(build-logic|buildSrc|.*[Tt]test.*)"
         DEPENDENCY_GRAPH_EXCLUDE_CONFIGURATIONS: ".*[Tt]est.*Classpath"
diff --git a/.github/workflows/dependabot-auto-approve-pr.yml b/.github/workflows/dependabot-auto-approve-pr.yml
index 5aaaae1..ebe152c 100644
--- a/.github/workflows/dependabot-auto-approve-pr.yml
+++ b/.github/workflows/dependabot-auto-approve-pr.yml
@@ -14,7 +14,7 @@ jobs:
       # https://github.com/dependabot/fetch-metadata
       - name: Dependabot metadata
         id: dependabot-metadata
-        uses: "dependabot/fetch-metadata@dbb049abf0d677abbd7f7eee0375145b417fdd34" # v2.2.0
+        uses: "dependabot/fetch-metadata@d7267f607e9d3fb96fc2fbe83e0af444713e90b7" # v2.3.0
 
       - name: Automatically approve & merge Dependabot patch PRs
         if: ${{steps.dependabot-metadata.outputs.update-type == 'version-update:semver-patch'}}