diff --git a/.github/workflows/cargo-update-pr.yml b/.github/workflows/cargo-update-pr.yml
index 00c6ce5..acd4946 100644
--- a/.github/workflows/cargo-update-pr.yml
+++ b/.github/workflows/cargo-update-pr.yml
@@ -41,7 +41,7 @@ jobs:
     name: Update
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
       - uses: dtolnay/rust-toolchain@master
diff --git a/.github/workflows/deny.yml b/.github/workflows/deny.yml
index d33fa49..c07bd9d 100644
--- a/.github/workflows/deny.yml
+++ b/.github/workflows/deny.yml
@@ -25,13 +25,13 @@ jobs:
     name: cargo deny check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
       - uses: dtolnay/rust-toolchain@master
         with:
           toolchain: ${{ inputs.rust-toolchain }}
-      - uses: EmbarkStudios/cargo-deny-action@91bf2b620e09e18d6eb78b92e7861937469acedb # v2.0.17
+      - uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20
         with:
           command: check all
           arguments: ${{ inputs.deny-flags }}