diff --git a/.github/workflows/auto-license-report.yml b/.github/workflows/auto-license-report.yml
index aa242b0e9a43..4e96bf38ad5a 100644
--- a/.github/workflows/auto-license-report.yml
+++ b/.github/workflows/auto-license-report.yml
@@ -28,7 +28,7 @@ jobs:
           java-version-file: .java-version
 
       - name: Set up gradle
-        uses: gradle/actions/setup-gradle@06832c7b30a0129d7fb559bcc6e43d26f6374244 # v4.3.1
+        uses: gradle/actions/setup-gradle@8379f6a1328ee0e06e2bb424dadb7b159856a326 # v4.4.0
         with:
           cache-read-only: true
 
diff --git a/.github/workflows/auto-spotless.yml b/.github/workflows/auto-spotless.yml
index 09f8102fd0a2..354fa1962bac 100644
--- a/.github/workflows/auto-spotless.yml
+++ b/.github/workflows/auto-spotless.yml
@@ -28,7 +28,7 @@ jobs:
           java-version-file: .java-version
 
       - name: Set up gradle
-        uses: gradle/actions/setup-gradle@06832c7b30a0129d7fb559bcc6e43d26f6374244 # v4.3.1
+        uses: gradle/actions/setup-gradle@8379f6a1328ee0e06e2bb424dadb7b159856a326 # v4.4.0
         with:
           cache-read-only: true
 
diff --git a/.github/workflows/auto-update-pull-request.yml b/.github/workflows/auto-update-pull-request.yml
index fdef4cb8d9ee..709eb5873661 100644
--- a/.github/workflows/auto-update-pull-request.yml
+++ b/.github/workflows/auto-update-pull-request.yml
@@ -18,7 +18,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Download patch
-        uses: actions/download-artifact@v4.3.0
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           run-id: ${{ github.event.workflow_run.id }}
           path: ${{ runner.temp }}