diff --git a/.github/workflows/build-test.yaml b/.github/workflows/build-test.yaml
index b2cdc6f..3c5b3fc 100644
--- a/.github/workflows/build-test.yaml
+++ b/.github/workflows/build-test.yaml
@@ -29,7 +29,7 @@ jobs:
           go-version-file: go.mod
 
       - name: Run golangci-lint
-        uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
+        uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1
         with:
           version: v2.1.0
           args: --timeout 10m --verbose --issues-exit-code=0
diff --git a/.github/workflows/helm-docs.yaml b/.github/workflows/helm-docs.yaml
index c87b4ee..bfd1c51 100644
--- a/.github/workflows/helm-docs.yaml
+++ b/.github/workflows/helm-docs.yaml
@@ -62,7 +62,7 @@ jobs:
           git commit -m "[HELM] Update helm docs"
       - name: Push Changes
         if: steps.filter-readme.outputs.readme == 'true'
-        uses: ad-m/github-push-action@v1.1.0
+        uses: ad-m/github-push-action@v1.3.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           branch: ${{ github.head_ref }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 4cde807..b8a9921 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -106,7 +106,7 @@ jobs:
 
       - name: Push changes
         if: steps.filter.outputs.versions == 'true'
-        uses: ad-m/github-push-action@v1.1.0
+        uses: ad-m/github-push-action@v1.3.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           branch: ${{ github.ref_name }}
@@ -119,7 +119,7 @@ jobs:
           toTag: "main"
 
       - name: Create Release PR
-        uses: devops-infra/action-pull-request@v1.0.2
+        uses: devops-infra/action-pull-request@v1.2.1
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           target_branch: main
@@ -213,7 +213,7 @@ jobs:
       # Install the cosign tool except on PR
       # https://github.com/sigstore/cosign-installer
       - name: Install cosign
-        uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 #v4.1.1
+        uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 #v4.1.2
         with:
           cosign-release: "v2.2.4"