diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index f8a51a6..38f84e6 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -20,7 +20,7 @@ jobs:
     - uses: 'hmarr/debug-action@cd1afbd7852b7ad7b1b7a9a1b03efebd3b0a1820' # v3.0.0
 
     # https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions
-    - uses: 'zgosalvez/github-actions-ensure-sha-pinned-actions@c3a2b64f69b7a1542a68f44d9edbd9ec3fc1455e' # v3.0.20
+    - uses: 'zgosalvez/github-actions-ensure-sha-pinned-actions@6eb1abde32fed00453b0d03497f4ba4fecba146d' # v3.0.21
 
     # https://github.com/actions/checkout
     - name: 'checkout'
@@ -35,7 +35,7 @@ jobs:
 
     # https://github.com/gradle/actions/tree/main/setup-gradle
     - name: 'Set up Gradle'
-      uses: 'gradle/actions/setup-gradle@c94eb9d32c39fe014e838aa5efdcc186a8ba7e53' # v4.2.2
+      uses: 'gradle/actions/setup-gradle@aa23778d2dc6f6556fcc7164e99babbd8c3134e4' # v4.2.2
       with:
         gradle-version: 'wrapper'
         gradle-home-cache-cleanup: true
@@ -43,7 +43,7 @@ jobs:
 
     # https://github.com/gradle/actions/tree/main/dependency-submission
     - name: "Generate and submit dependency graph"
-      uses: "gradle/actions/dependency-submission@c94eb9d32c39fe014e838aa5efdcc186a8ba7e53" # v4.2.2
+      uses: "gradle/actions/dependency-submission@aa23778d2dc6f6556fcc7164e99babbd8c3134e4" # v4.2.2
       env:
         DEPENDENCY_GRAPH_EXCLUDE_PROJECTS: "^:(build-logic|buildSrc|.*[Tt]test.*)"
         DEPENDENCY_GRAPH_EXCLUDE_CONFIGURATIONS: ".*[Tt]est.*Classpath"