diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 948ebd7..a010b64 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -447,7 +447,7 @@ jobs:
 
       - name: Upload test results
         if: failure()
-        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
         with:
           name: valgrind-results
           path: out/valgrind-results.tar.gz
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 7aa95ff..6a9c694 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -28,7 +28,7 @@ jobs:
       - name: Generate a token with GitHub App if App ID exists
         id: generate-token
         if: vars.BOT_APP_ID
-        uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755 # v1
+        uses: actions/create-github-app-token@0d564482f06ca65fa9e77e2510873638c82206f2 # v1
         with:
           app-id: ${{ vars.BOT_APP_ID }}
           private-key: ${{ secrets.BOT_PRIVATE_KEY }}
diff --git a/.github/workflows/semantic-release.yml b/.github/workflows/semantic-release.yml
index f6aabca..d5c9e29 100644
--- a/.github/workflows/semantic-release.yml
+++ b/.github/workflows/semantic-release.yml
@@ -24,7 +24,7 @@ jobs:
       - name: Generate a bot token with BOT_APP_ID
         id: bot_token
         if: vars.BOT_APP_ID && env.BOT_PRIVATE_KEY != null
-        uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755 # v1
+        uses: actions/create-github-app-token@0d564482f06ca65fa9e77e2510873638c82206f2 # v1
         env:
           BOT_PRIVATE_KEY: ${{ secrets.BOT_PRIVATE_KEY }}
         with:
diff --git a/Makefile b/Makefile
index e3ccf32..c4a9249 100644
--- a/Makefile
+++ b/Makefile
@@ -26,7 +26,7 @@ clean:
 # Install standalone tools
 prerequisites:
 	pipx install --force pre-commit==4.0.1
-	pipx install --force watchfiles==1.0.0
+	pipx install --force watchfiles==1.0.4
 
 ########################################################################################
 # Lint
diff --git a/vcpkg.json b/vcpkg.json
index f1bc784..d64f24f 100644
--- a/vcpkg.json
+++ b/vcpkg.json
@@ -2,7 +2,7 @@
   "$schema": "https://raw.githubusercontent.com/microsoft/vcpkg-tool/main/docs/vcpkg.schema.json",
   "name": "cppfront-practice",
   "description": "Practice based on cppfront",
-  "builtin-baseline": "55dec59d05cd1731a06a832302e80f6105a3d482",
+  "builtin-baseline": "f9701294aebc79cfe1c409c34a1fe4f37fee3473",
   "homepage": "https://github.com/msclock/cppfront-practice",
   "dependencies": [
     "cppfront",