diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fb5afe55..323f0c82 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -89,7 +89,7 @@ jobs:
           sudo apt-get update
           sudo apt-get install --yes --no-install-recommends libasound2-dev pkg-config
       - name: Install cargo-nextest
-        uses: taiki-e/install-action@91ddec75689c4c78665b598d188dc821c5a43e5c # v2.85.9
+        uses: taiki-e/install-action@82cd3e7658a6f96c86c0234aeeda1748937cb0a1 # v2.85.13
         with:
           tool: nextest
       - name: Test workspace
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 9a53d0d3..eb18eeeb 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -79,7 +79,7 @@ jobs:
         run: cargo audit --deny unmaintained --deny unsound --deny yanked
 
   osv-scanner:
-    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@9a498708959aeaef5ef730655706c5a1df1edbc2
+    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@8deb546fdb875b9996d27d4950be7312dac076a1
     permissions:
       actions: read
       contents: read