diff --git a/.github/workflows/careful.yml b/.github/workflows/careful.yml
index 0fee860c..ee229026 100644
--- a/.github/workflows/careful.yml
+++ b/.github/workflows/careful.yml
@@ -37,7 +37,7 @@ jobs:
         with:
           toolchain: ${{ matrix.rust }}
       - name: install cargo-careful
-        uses: taiki-e/install-action@42c270942d62c8642a0086bc5854743d9a9c510d # v2
+        uses: taiki-e/install-action@07b43ed508403fa32c11f04dd608931cdf6748e2 # v2
         with:
           tool: cargo-careful
       - uses: Swatinem/rust-cache@23bce251a8cd2ffc3c1075eaa2367cf899916d84 # v2
diff --git a/.github/workflows/ci-heavy.yml b/.github/workflows/ci-heavy.yml
index 49fc5c1b..6a7f1632 100644
--- a/.github/workflows/ci-heavy.yml
+++ b/.github/workflows/ci-heavy.yml
@@ -151,7 +151,7 @@ jobs:
         with:
           toolchain: ${{ matrix.rust }}
       - name: install cargo-hack
-        uses: taiki-e/install-action@42c270942d62c8642a0086bc5854743d9a9c510d # v2
+        uses: taiki-e/install-action@07b43ed508403fa32c11f04dd608931cdf6748e2 # v2
         with:
           tool: cargo-hack
       - uses: Swatinem/rust-cache@23bce251a8cd2ffc3c1075eaa2367cf899916d84 # v2
@@ -244,7 +244,7 @@ jobs:
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Install cargo-hack
-        uses: taiki-e/install-action@42c270942d62c8642a0086bc5854743d9a9c510d # v2
+        uses: taiki-e/install-action@07b43ed508403fa32c11f04dd608931cdf6748e2 # v2
         with:
           tool: cargo-hack
 
diff --git a/.github/workflows/coverage.yaml b/.github/workflows/coverage.yaml
index dc78acf9..7dd6e13c 100644
--- a/.github/workflows/coverage.yaml
+++ b/.github/workflows/coverage.yaml
@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
       - name: Install cargo-hack
-        uses: taiki-e/install-action@42c270942d62c8642a0086bc5854743d9a9c510d # v2
+        uses: taiki-e/install-action@07b43ed508403fa32c11f04dd608931cdf6748e2 # v2
         with:
           tool: cargo-tarpaulin
 
diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index 13215b43..1dbb6bfa 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -30,7 +30,7 @@ jobs:
         uses: dtolnay/rust-toolchain@stable
   
       - name: Run release-plz
-        uses: MarcoIeni/release-plz-action@91356927c5ac06a27d9342861ff6e234210d56b4 # v0.5
+        uses: MarcoIeni/release-plz-action@5c48341da1cf7cd826bb6fa008d1ae7f5717aea1 # v0.5
         env:
           GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
\ No newline at end of file