diff --git a/.github/workflows/codeql-scanning.yml b/.github/workflows/codeql-scanning.yml
index e0dd67b8..136070d8 100644
--- a/.github/workflows/codeql-scanning.yml
+++ b/.github/workflows/codeql-scanning.yml
@@ -22,11 +22,11 @@ jobs:
           java-version: '25'
           distribution: 'temurin'
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
+        uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
         with:
           languages: java
           queries: security-and-quality
       - name: Autobuild
-        uses: github/codeql-action/autobuild@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
+        uses: github/codeql-action/autobuild@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
       - name: Perform analysis
-        uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
+        uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
diff --git a/.github/workflows/semgrep-scanning.yml b/.github/workflows/semgrep-scanning.yml
index c4f37a11..94336e36 100644
--- a/.github/workflows/semgrep-scanning.yml
+++ b/.github/workflows/semgrep-scanning.yml
@@ -31,6 +31,6 @@ jobs:
             --output semgrep-java-scan.sarif
 
       - name: Upload SARIF to Code Scanning
-        uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6 # 4.32.3
+        uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # 4.32.4
         with:
           sarif_file: semgrep-java-scan.sarif