diff --git a/.github/workflows/__main-ci.yml b/.github/workflows/__main-ci.yml
index b60e646..1fc87f5 100644
--- a/.github/workflows/__main-ci.yml
+++ b/.github/workflows/__main-ci.yml
@@ -32,7 +32,7 @@ jobs:
   release:
     needs: ci
     if: github.event_name != 'schedule'
-    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@2c8e24b416226074aea1e240468f043edefc5760 # 0.23.2
+    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@b27c38015a8265780329d229c841d057a18b8fae # 0.25.0
     permissions:
       contents: read
     with:
diff --git a/.github/workflows/__test-action-parse-ci-reports.yml b/.github/workflows/__test-action-parse-ci-reports.yml
index cb7e053..b4c0fad 100644
--- a/.github/workflows/__test-action-parse-ci-reports.yml
+++ b/.github/workflows/__test-action-parse-ci-reports.yml
@@ -8,7 +8,7 @@ permissions:
 
 jobs:
   continuous-integration:
-    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@47891dc49a31209a88949e081d97a010f8cd20c4 # 0.23.2
+    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@6b74a8f070140f5c120f78026d58e4c00d1b1e37 # 0.24.2
     permissions:
       contents: read
       id-token: write
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index 877d20e..476402a 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -99,12 +99,12 @@ jobs:
                 return;
               }
             }
-      - uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@47891dc49a31209a88949e081d97a010f8cd20c4 # 0.23.2
+      - uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@6b74a8f070140f5c120f78026d58e4c00d1b1e37 # 0.24.2
         if: ${{ steps.has-prettier-plugins.outputs.package-json-dir }}
         with:
           working-directory: ${{ steps.has-prettier-plugins.outputs.package-json-dir }}
 
-      - uses: super-linter/super-linter/slim@5119dcd8011e92182ce8219d9e9efc82f16fddb6 # v8.0.0
+      - uses: super-linter/super-linter/slim@9e863354e3ff62e0727d37183162c4a88873df41 # v8.6.0
         env:
           VALIDATE_ALL_CODEBASE: ${{ inputs.lint-all }}
           LOG_LEVEL: WARN
@@ -129,11 +129,11 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
+      - uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
         with:
           languages: ${{ matrix.language }}
 
-      - uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
+      - uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
         with:
           category: "/language:${{matrix.language}}"
 
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index f9e6e38..3b9157a 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -68,7 +68,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
+      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10.3.0
         with:
           stale-issue-message: ${{ inputs.stale-issue-message || 'This issue is stale' }}
           stale-pr-message: ${{ inputs.stale-pr-message || 'This PR is stale' }}
diff --git a/actions/parse-ci-reports/action.yml b/actions/parse-ci-reports/action.yml
index 8cbb9b7..634af14 100644
--- a/actions/parse-ci-reports/action.yml
+++ b/actions/parse-ci-reports/action.yml
@@ -75,7 +75,7 @@ runs:
   using: "composite"
   steps:
     - name: Setup Node.js
-      uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@47891dc49a31209a88949e081d97a010f8cd20c4 # 0.23.2
+      uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@6b74a8f070140f5c120f78026d58e4c00d1b1e37 # 0.24.2
       with:
         working-directory: ${{ github.action_path }}