diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index 0ca765cb..4e2f1cb7 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -34,7 +34,7 @@ jobs:
           toolchain: nightly
 
       - name: Install cargo-audit
-        uses: taiki-e/install-action@9e1e5806d4a4822de933115878265be9aaa786d9  # v2.82.2
+        uses: taiki-e/install-action@9bcaee1dcae34154180f412e2fa69355a7cda9f6  # v2.82.6
         with:
           tool: cargo-audit
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9fa63fea..1093e648 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -57,7 +57,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
 
       - name: Install cargo-audit
-        uses: taiki-e/install-action@9e1e5806d4a4822de933115878265be9aaa786d9  # v2.82.2
+        uses: taiki-e/install-action@9bcaee1dcae34154180f412e2fa69355a7cda9f6  # v2.82.6
         with:
           tool: cargo-audit
 
@@ -227,7 +227,7 @@ jobs:
         uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32  # v2.9.1
 
       - name: Install cargo-llvm-cov
-        uses: taiki-e/install-action@9e1e5806d4a4822de933115878265be9aaa786d9  # v2.82.2
+        uses: taiki-e/install-action@9bcaee1dcae34154180f412e2fa69355a7cda9f6  # v2.82.6
         with:
           tool: cargo-llvm-cov
 
@@ -329,7 +329,7 @@ jobs:
         uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32  # v2.9.1
 
       - name: Restore criterion baseline cache
-        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5.0.5
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
         with:
           path: target/criterion/
           key: ${{ runner.os }}-${{ runner.arch }}-criterion-${{ github.run_id }}
@@ -410,7 +410,7 @@ jobs:
 
       - name: Save criterion baseline cache
         if: always()
-        uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5.0.5
+        uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
         with:
           path: target/criterion/
           key: ${{ runner.os }}-${{ runner.arch }}-criterion-${{ github.run_id }}
diff --git a/.github/workflows/conformance.yml b/.github/workflows/conformance.yml
index 57d8fb0a..899d259c 100644
--- a/.github/workflows/conformance.yml
+++ b/.github/workflows/conformance.yml
@@ -42,7 +42,7 @@ jobs:
         uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32  # v2.9.1
 
       - name: Install Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v5
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16  # v5
         with:
           go-version: '1.23'
           cache: false
diff --git a/.github/workflows/e2e-full.yml b/.github/workflows/e2e-full.yml
index 999e423c..65d9b2a3 100644
--- a/.github/workflows/e2e-full.yml
+++ b/.github/workflows/e2e-full.yml
@@ -95,7 +95,7 @@ jobs:
         uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32  # v2.9.1
 
       - name: Restore criterion baseline
-        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5.0.5
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
         with:
           path: target/criterion/
           key: ${{ runner.os }}-${{ runner.arch }}-criterion-full-${{ github.run_id }}
@@ -131,7 +131,7 @@ jobs:
 
       - name: Save criterion baseline
         if: always()
-        uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5.0.5
+        uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
         with:
           path: target/criterion/
           key: ${{ runner.os }}-${{ runner.arch }}-criterion-full-${{ github.run_id }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2bb9306e..09c218a3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -626,7 +626,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Generate SLSA provenance attestations
-        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32  # v2
+        uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373  # v2
         with:
           subject-path: |
             artifacts/br-${{ steps.asset_version.outputs.asset_version }}-*.tar.gz