diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 30814d3f..b5cf1f57 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@v6.0.2
 
       - name: Dependency Review
-        uses: actions/dependency-review-action@v4.9.0
+        uses: actions/dependency-review-action@v5.0.0
         with:
           fail-on-severity: critical
           comment-summary-in-pr: always
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 9c3010b0..cfd881f3 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -69,7 +69,7 @@ jobs:
         if: steps.vitest.outcome == 'success' &&
           hashFiles('coverage/coverage-summary.json') != ''
         # v2.9.0
-        uses: davelosert/vitest-coverage-report-action@3c50566c523e04813df28de8f7c48dd97d663f1c
+        uses: davelosert/vitest-coverage-report-action@02f3c2e641286b7fa308cd3e430783103ce6103b
         with:
           json-summary-path: "./coverage/coverage-summary.json"
           json-final-path: "./coverage/coverage-final.json"