diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
index 73dcd4bc..29295746 100644
--- a/.github/workflows/cla.yml
+++ b/.github/workflows/cla.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check CLA
-        uses: conda/actions/check-cla@eb545bb8ab48d499b31c057a6df3cf46753fdbcb # v25.3.1
+        uses: conda/actions/check-cla@87cb4b58e6a169cb41db8af4d49ace6275f7b213 # v25.9.0
         with:
           # [required]
           # A token with ability to comment, label, and modify the commit status
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index fe6a008f..f081a2c4 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -33,12 +33,12 @@ jobs:
             days-before-issue-stale: 90
             days-before-issue-close: 21
     steps:
-      - uses: conda/actions/read-yaml@eb545bb8ab48d499b31c057a6df3cf46753fdbcb # v25.3.1
+      - uses: conda/actions/read-yaml@87cb4b58e6a169cb41db8af4d49ace6275f7b213 # v25.9.0
         id: read_yaml
         with:
           path: https://raw.githubusercontent.com/conda/infra/main/.github/messages.yml
 
-      - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0
+      - uses: actions/stale@3a9db7e6a41a89f618792c92c0e97cc736e1b13f # v10.0.0
         id: stale
         with:
           # Only issues with these labels are checked whether they are stale
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 7d4f4fda..80c75f9b 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -55,11 +55,11 @@ jobs:
           git config --global user.name 'Conda Bot'
           git config --global user.email '18747875+conda-bot@users.noreply.github.com'
 
-      - uses: conda/actions/combine-durations@eb545bb8ab48d499b31c057a6df3cf46753fdbcb # v25.3.1
+      - uses: conda/actions/combine-durations@87cb4b58e6a169cb41db8af4d49ace6275f7b213 # v25.9.0
         id: durations
         continue-on-error: true
 
-      - uses: conda/actions/template-files@eb545bb8ab48d499b31c057a6df3cf46753fdbcb # v25.3.1
+      - uses: conda/actions/template-files@87cb4b58e6a169cb41db8af4d49ace6275f7b213 # v25.9.0
         id: templates
         continue-on-error: true