diff --git a/.github/actions/cache/restore/action.yml b/.github/actions/cache/restore/action.yml
index 86f1e79343bc..919699d22b5a 100644
--- a/.github/actions/cache/restore/action.yml
+++ b/.github/actions/cache/restore/action.yml
@@ -24,7 +24,7 @@ runs:
     - name: Restore cache to github
       id: github-cache
       if: ${{ runner.environment == 'github-hosted' }}
-      uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
+      uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
       with:
         key: ${{ inputs.key }}
         path: ${{ inputs.path }}
diff --git a/.github/actions/cache/save/action.yml b/.github/actions/cache/save/action.yml
index 73d5742ac737..341d77673e3e 100644
--- a/.github/actions/cache/save/action.yml
+++ b/.github/actions/cache/save/action.yml
@@ -15,7 +15,7 @@ runs:
   steps:
     - name: Save cache to github
       if: ${{ runner.environment == 'github-hosted' }}
-      uses: actions/cache/save@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
+      uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
       with:
         key: ${{ inputs.key }}
         path: ${{ inputs.path }}
diff --git a/.github/workflows/ci-lint.yaml b/.github/workflows/ci-lint.yaml
index 7a30fae3a2c3..f224d0292bba 100644
--- a/.github/workflows/ci-lint.yaml
+++ b/.github/workflows/ci-lint.yaml
@@ -105,7 +105,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
-      - uses: crate-ci/typos@85f62a8a84f939ae994ab3763f01a0296d61a7ee # v1.36.2
+      - uses: crate-ci/typos@83157de2df0fa7c7ae20f73f9dbed44c41f2bb64 # v1.38.0
         with:
           files: .
 
diff --git a/.github/workflows/reusable-build-bench.yml b/.github/workflows/reusable-build-bench.yml
index 89a9865eaa22..d9469f917e71 100644
--- a/.github/workflows/reusable-build-bench.yml
+++ b/.github/workflows/reusable-build-bench.yml
@@ -42,7 +42,7 @@ jobs:
           key: build-bench-${{ inputs.target }}
 
       - name: Install cargo-codspeed binary
-        uses: taiki-e/install-action@6f69ec9970ed0c500b1b76d648e05c4c7e0e5671 # v2
+        uses: taiki-e/install-action@f33d3f211b0303ea71864a2677724fed135b8e99 # v2
         with:
           tool: cargo-codspeed@2.10.1
 
diff --git a/.github/workflows/reusable-build-codspeed.yml b/.github/workflows/reusable-build-codspeed.yml
index fbb114b51804..b5b7790c010e 100644
--- a/.github/workflows/reusable-build-codspeed.yml
+++ b/.github/workflows/reusable-build-codspeed.yml
@@ -30,7 +30,7 @@ jobs:
           key: build-bench-${{ inputs.target }}
 
       - name: Install cargo-codspeed binary
-        uses: taiki-e/install-action@6f69ec9970ed0c500b1b76d648e05c4c7e0e5671 # v2
+        uses: taiki-e/install-action@f33d3f211b0303ea71864a2677724fed135b8e99 # v2
         with:
           tool: cargo-codspeed@2.10.1
 
diff --git a/.github/workflows/reusable-release-crates.yml b/.github/workflows/reusable-release-crates.yml
index 4e20a5aa4bf0..ed7b6625349b 100644
--- a/.github/workflows/reusable-release-crates.yml
+++ b/.github/workflows/reusable-release-crates.yml
@@ -42,7 +42,7 @@ jobs:
           save-if: true
           key: release
 
-      - uses: cargo-bins/cargo-binstall@20aa316bab4942180bbbabe93237858e8d77f1ed # v1.15.5
+      - uses: cargo-bins/cargo-binstall@38e8f5e4c386b611d51e8aa997b9a06a3c8eb67a # v1.15.6
 
       - name: Install cargo-workspaces
         run: cargo binstall --no-confirm cargo-workspaces@0.4.0 --force
diff --git a/.github/workflows/reusable-rust-test.yml b/.github/workflows/reusable-rust-test.yml
index c1a17d2da796..588de60be9be 100644
--- a/.github/workflows/reusable-rust-test.yml
+++ b/.github/workflows/reusable-rust-test.yml
@@ -49,7 +49,7 @@ jobs:
 
       - name: Install cargo-binstall
         if: ${{ inputs.cargo-check-strategy == 'separated' }}
-        uses: cargo-bins/cargo-binstall@20aa316bab4942180bbbabe93237858e8d77f1ed # v1.15.5
+        uses: cargo-bins/cargo-binstall@38e8f5e4c386b611d51e8aa997b9a06a3c8eb67a # v1.15.6
 
       - name: Install cargo-workspaces
         if: ${{ inputs.cargo-check-strategy == 'separated' }}
@@ -95,7 +95,7 @@ jobs:
         run: cargo codegen
 
       - name: Install cargo-deny
-        uses: taiki-e/install-action@6f69ec9970ed0c500b1b76d648e05c4c7e0e5671 # v2
+        uses: taiki-e/install-action@f33d3f211b0303ea71864a2677724fed135b8e99 # v2
         with:
           tool: cargo-deny@0.18.3
       - name: Check licenses
@@ -103,7 +103,7 @@ jobs:
           cargo deny --all-features check license bans
           cargo xtask deny-ext
 
-      - uses: cargo-bins/cargo-binstall@20aa316bab4942180bbbabe93237858e8d77f1ed # v1.15.5
+      - uses: cargo-bins/cargo-binstall@38e8f5e4c386b611d51e8aa997b9a06a3c8eb67a # v1.15.6
       - run: cargo binstall --no-confirm cargo-shear@1.1.12 --force
       - run: cargo shear