diff --git a/.github/workflows/changeset.yaml b/.github/workflows/changeset.yaml
index ba134106..b7f6e44e 100644
--- a/.github/workflows/changeset.yaml
+++ b/.github/workflows/changeset.yaml
@@ -27,7 +27,7 @@ jobs:
           fetch-depth: 0
 
       - name: Use Node.js 24
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 24 # NPM 11.5.1+ required for OIDC trusted publishing
           cache: yarn
diff --git a/.github/workflows/native_build.yaml b/.github/workflows/native_build.yaml
index 06134298..6a0a8f42 100644
--- a/.github/workflows/native_build.yaml
+++ b/.github/workflows/native_build.yaml
@@ -21,7 +21,7 @@ jobs:
           java-version: '17'
           distribution: 'temurin'
 
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 22
           cache: 'yarn'
@@ -56,7 +56,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 22
           cache: 'yarn'
diff --git a/.github/workflows/pinact_update.yaml b/.github/workflows/pinact_update.yaml
index 529e85c5..0622875e 100644
--- a/.github/workflows/pinact_update.yaml
+++ b/.github/workflows/pinact_update.yaml
@@ -23,7 +23,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Install aqua (installs pinact)
-        uses: aquaproj/aqua-installer@96a9bc20066c5bf5e275b41019cfc165b25f4e2e # v4.0.5
+        uses: aquaproj/aqua-installer@82d0e83878a8657c4a6f2ff1755d3bfbfc67f329 # v4.1.0
         with:
           aqua_version: v2.56.1
           aqua_opts: "-c aqua.yaml"
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index cfc185d3..64b94263 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 22