diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index 0e7a759c..3d67b439 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -84,4 +84,4 @@ jobs:
       with:
         persist-credentials: false
     - name: Run zizmor
-      uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
+      uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e29d1e90..b5d3c8ba 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -55,7 +55,7 @@ jobs:
     - name: Initialize cache
       uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
     - name: Install cargo-hack
-      uses: taiki-e/install-action@37f7c5781271959fb65b6b35224e28652ff2b63d  # v2.87.0
+      uses: taiki-e/install-action@4cef1412cce204788f482e778a0b9187f9626a29  # v2.87.21
       with:
         tool: cargo-hack
     - name: Build
@@ -78,7 +78,7 @@ jobs:
     - name: Initialize cache
       uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
     - name: Install cargo-hack
-      uses: taiki-e/install-action@37f7c5781271959fb65b6b35224e28652ff2b63d  # v2.87.0
+      uses: taiki-e/install-action@4cef1412cce204788f482e778a0b9187f9626a29  # v2.87.21
       with:
         tool: cargo-hack
     - name: Default features
@@ -175,7 +175,7 @@ jobs:
         | sarif-fmt
       continue-on-error: true
     - name: Upload
-      uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
+      uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
       with:
         sarif_file: clippy-results.sarif
         wait-for-processing: true
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 0465cc9c..b2cd69fb 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -29,4 +29,4 @@ jobs:
     - name: prek
       uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0
       with:
-        prek-version: '0.5.0'
+        prek-version: 'v0.5.3'
diff --git a/.github/workflows/rust-next.yml b/.github/workflows/rust-next.yml
index 21d02c46..2c618008 100644
--- a/.github/workflows/rust-next.yml
+++ b/.github/workflows/rust-next.yml
@@ -44,7 +44,7 @@ jobs:
     - name: Initialize cache
       uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
     - name: Install cargo-hack
-      uses: taiki-e/install-action@37f7c5781271959fb65b6b35224e28652ff2b63d  # v2.87.0
+      uses: taiki-e/install-action@4cef1412cce204788f482e778a0b9187f9626a29  # v2.87.21
       with:
         tool: cargo-hack
     - name: Build
@@ -69,7 +69,7 @@ jobs:
     - name: Initialize cache
       uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
     - name: Install cargo-hack
-      uses: taiki-e/install-action@37f7c5781271959fb65b6b35224e28652ff2b63d  # v2.87.0
+      uses: taiki-e/install-action@4cef1412cce204788f482e778a0b9187f9626a29  # v2.87.21
       with:
         tool: cargo-hack
     - name: Update dependencies
diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml
index 6321dae2..5fd4e02b 100644
--- a/.github/workflows/spelling.yml
+++ b/.github/workflows/spelling.yml
@@ -24,4 +24,4 @@ jobs:
       with:
         persist-credentials: false
     - name: Spell Check Repo
-      uses: crate-ci/typos@4d9c206a77c041268485162b8e2579ad7a5cb9a3 # v1.50.0
+      uses: crate-ci/typos@00f422f3b19c57bc6338715ebfe3316d38768461 # v1.50.3