diff --git a/.github/workflows/careful.yml b/.github/workflows/careful.yml
index 472bfd64..10458965 100644
--- a/.github/workflows/careful.yml
+++ b/.github/workflows/careful.yml
@@ -37,7 +37,7 @@ jobs:
         with:
           toolchain: ${{ matrix.rust }}
       - name: install cargo-careful
-        uses: taiki-e/install-action@278aeeb6e331c1bd610bffe45862e09452854b1a # v2
+        uses: taiki-e/install-action@5d427d86f088a6cedcddb92b3ad038d30721b52f # v2
         with:
           tool: cargo-careful
       - uses: Swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab # v2
diff --git a/.github/workflows/ci-heavy.yml b/.github/workflows/ci-heavy.yml
index d3260452..63a003d9 100644
--- a/.github/workflows/ci-heavy.yml
+++ b/.github/workflows/ci-heavy.yml
@@ -151,7 +151,7 @@ jobs:
         with:
           toolchain: ${{ matrix.rust }}
       - name: install cargo-hack
-        uses: taiki-e/install-action@278aeeb6e331c1bd610bffe45862e09452854b1a # v2
+        uses: taiki-e/install-action@5d427d86f088a6cedcddb92b3ad038d30721b52f # v2
         with:
           tool: cargo-hack
       - uses: Swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab # v2
@@ -253,7 +253,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Install cargo-hack
-        uses: taiki-e/install-action@278aeeb6e331c1bd610bffe45862e09452854b1a # v2
+        uses: taiki-e/install-action@5d427d86f088a6cedcddb92b3ad038d30721b52f # v2
         with:
           tool: cargo-hack
 
diff --git a/.github/workflows/coverage.yaml b/.github/workflows/coverage.yaml
index fb8287f2..6f952aec 100644
--- a/.github/workflows/coverage.yaml
+++ b/.github/workflows/coverage.yaml
@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Install cargo-hack
-        uses: taiki-e/install-action@278aeeb6e331c1bd610bffe45862e09452854b1a # v2
+        uses: taiki-e/install-action@5d427d86f088a6cedcddb92b3ad038d30721b52f # v2
         with:
           tool: cargo-tarpaulin
 
@@ -35,7 +35,7 @@ jobs:
           cargo tarpaulin --verbose --all-features --workspace --timeout 120 --out xml
       
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4
+        uses: codecov/codecov-action@5c47607acb93fed5485fdbf7232e8a31425f672a # v5
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           slug: rustic-rs/rustic_core
\ No newline at end of file
diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index 43e1a927..fcd7e665 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -30,7 +30,7 @@ jobs:
         uses: dtolnay/rust-toolchain@stable
   
       - name: Run release-plz
-        uses: MarcoIeni/release-plz-action@0a28fd4d52f6b5e06e0cf8e75a22e96e1966fc2f # v0.5
+        uses: MarcoIeni/release-plz-action@f0fdffff1ff475195a1638e487cf93719e065a8e # v0.5
         env:
           GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
\ No newline at end of file