diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c5675285..a46afd82 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -41,7 +41,7 @@ jobs:
         run: |
           set -Eeuo pipefail
           docker run --rm --mount type=bind,src=/var/run/docker.sock,dst=/var/run/docker.sock --mount type=bind,src="${{ github.workspace }}/.devcontainer/${{ matrix.flavor }}/test",dst=/ws -w /ws ${{ github.repository }}-${{ matrix.flavor }}:test bats --formatter junit testsuite.bats | tee test-report-${{ matrix.flavor }}.xml
-      - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+      - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
         if: always()
         with:
           name: test-results-${{ matrix.flavor }}
@@ -54,7 +54,7 @@ jobs:
     needs: build-test
     if: always()
     steps:
-      - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with:
           merge-multiple: true
           pattern: test-results-*
diff --git a/.github/workflows/linting-formatting.yml b/.github/workflows/linting-formatting.yml
index 1e848d4d..446d8755 100644
--- a/.github/workflows/linting-formatting.yml
+++ b/.github/workflows/linting-formatting.yml
@@ -26,7 +26,7 @@ jobs:
         with:
           fetch-depth: 0
           persist-credentials: false
-      - uses: oxsecurity/megalinter/flavors/documentation@5199c6377b4cb7faff749a1971636f3343db9fe6 # v7.12.0
+      - uses: oxsecurity/megalinter/flavors/documentation@bacb5f8674e3730b904ca4d20c8bd477bc51b1a7 # v7.13.0
         env:
           APPLY_FIXES: all
           VALIDATE_ALL_CODEBASE: true
@@ -35,12 +35,12 @@ jobs:
         if: success() || failure()
         with:
           sarif_file: megalinter-reports/megalinter-report.sarif
-      - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+      - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
         if: success() || failure()
         with:
           name: Linter Report
           path: |
             megalinter-reports
-      - uses: reviewdog/action-suggester@a1d57ff096639094e0ba35ef3039e79316364796 # v1.15.0
+      - uses: reviewdog/action-suggester@951f8ea45137fd52d269d75bddc3a813b78487aa # v1.16.0
         with:
           tool_name: MegaLinter