diff --git a/.github/workflows/testrunner.yaml b/.github/workflows/testrunner.yaml
index 646291571d..b4cd3fad1f 100644
--- a/.github/workflows/testrunner.yaml
+++ b/.github/workflows/testrunner.yaml
@@ -49,7 +49,7 @@ jobs:
           # Has been added manually (both the key in vivi-deployment and
           # the GHA secret in vivi)
           ssh-key: ${{secrets.DEPLOY_KEY_DEPLOYMENT}}
-      - uses: ZeitOnline/gh-action-baseproject@aef7d211670835e83fa026279a4cc240c83e99c2 # v0.11.0
+      - uses: ZeitOnline/gh-action-baseproject@9ed16e23e3b0465030ee4f20abd955b87f159317 # v0.11.1
         with:
           project_name: ${{env.project}}
           environment: staging
@@ -139,7 +139,7 @@ jobs:
           files: "deployment/work/source/report*.xml"
 
       - name: Publish coverage
-        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
         id: coverage
         with:
           name: coverage-${{env.project}}