diff --git a/.github/workflows/build-beta.yml b/.github/workflows/build-beta.yml
index 6a11b87..780ac15 100644
--- a/.github/workflows/build-beta.yml
+++ b/.github/workflows/build-beta.yml
@@ -23,7 +23,7 @@ jobs:
     outputs:
       v: ${{ steps.read.outputs.v }}
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - id: read
         run: |
           v=$(awk '/substitutions:/ {f=1} f && /version:/ {print $2; exit}' \
@@ -39,7 +39,7 @@ jobs:
         include:
           - { yaml: Integrations/ESPHome/CAST-1_W.yaml,   name: firmware-w }
           - { yaml: Integrations/ESPHome/CAST-1_ETH.yaml, name: firmware-e }
-    uses: esphome/workflows/.github/workflows/build.yml@e7eee2a828517c042794a831f75310959fbf2a16 # 2025.10.0
+    uses: esphome/workflows/.github/workflows/build.yml@025a1e6255610c498ed590403b7e510b69e474df # 2026.4.1
     with:
       files: ${{ matrix.yaml }}
       esphome-version: stable
@@ -54,7 +54,7 @@ jobs:
       contents: write
     steps:
       - name: Download firmware artifacts
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           path: fw
           pattern: firmware*