diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 9ea65733c..121292ab2 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -45,7 +45,7 @@ jobs:
         uses: gradle/actions/setup-gradle@v6.3.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.37.6
+        uses: github/codeql-action/init@v4.37.8
         with:
           languages: java
           # Manual build: the Android Gradle plugin needs a real Gradle
@@ -65,6 +65,6 @@ jobs:
         run: ./gradlew assembleRelease --no-daemon --no-build-cache
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4.37.6
+        uses: github/codeql-action/analyze@v4.37.8
         with:
           category: '/language:java'
diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index 6967654c2..8da574e54 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -59,7 +59,7 @@ jobs:
       # Inline PR annotations + Security tab entries for Checkstyle findings.
       - name: Upload Checkstyle results to code scanning
         if: always() && steps.sarif.outputs.exists == 'true'
-        uses: github/codeql-action/upload-sarif@v4.37.6
+        uses: github/codeql-action/upload-sarif@v4.37.8
         with:
           sarif_file: logback-android/build/reports/checkstyle/checkstyleAnalysis.sarif
           category: checkstyle