diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5222624..4d8ac72 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -36,7 +36,7 @@ jobs:
           rebar3-version: ${{ env.REBAR3_VERSION }}
 
       - name: Cache build artifacts
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v4
         with:
           path: |
             _build
@@ -154,7 +154,7 @@ jobs:
           rebar3-version: ${{ env.REBAR3_VERSION }}
 
       - name: Cache PLT
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v4
         with:
           path: _build/default/*_plt
           key: ${{ runner.os }}-plt-${{ hashFiles('rebar.config') }}
@@ -322,7 +322,7 @@ jobs:
           rebar3 as prod tar
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           files: _build/prod/rel/safe_brute_force/*.tar.gz
           generate_release_notes: true
diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
index 69bc347..e7a969d 100644
--- a/.github/workflows/dependabot-automerge.yml
+++ b/.github/workflows/dependabot-automerge.yml
@@ -54,7 +54,7 @@ jobs:
     steps:
       - name: Fetch Dependabot metadata
         id: meta
-        uses: dependabot/fetch-metadata@dbb049abf0d677abbd7f7eee0375145b417fdd34 # v2.2.0
+        uses: dependabot/fetch-metadata@ffa630c65fa7e0ecfa0625b5ceda64399aea1b36 # v3.0.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}