diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index d5980a07f..fc164085e 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -62,7 +62,7 @@ jobs:
           path: bencher.dev.sn.json
 
       # Upload to graphing service
-      - uses: bencherdev/bencher@f80847436d7157936b40525db4c2a1064124f04a
+      - uses: bencherdev/bencher@58a33f76185c1187f3df355817d2ac7285ac77f0
       - name: Upload benchmark results to Bencher
         run: |
           bencher run \
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index b347ad1fb..0da934b02 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -152,7 +152,7 @@ jobs:
     name: Bazel - ${{ matrix.os }} ${{ matrix.build-type }}
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: bazel-contrib/setup-bazel@c5acdfb288317d0b5c0bbd7a396a3dc868bb0f86 # v0.19.0
+    - uses: bazel-contrib/setup-bazel@104e3eea9447cdaa4b00d0fb46191a3985d26ab3 # v0.19.1
     - name: Mount bazel cache  # Optional
       uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       with:
diff --git a/.github/workflows/reusable-vm-build.yml b/.github/workflows/reusable-vm-build.yml
index 603ca6fbb..b1d089a06 100644
--- a/.github/workflows/reusable-vm-build.yml
+++ b/.github/workflows/reusable-vm-build.yml
@@ -105,7 +105,7 @@ jobs:
 
     - name: Build on OpenBSD
       if: inputs.vm-type == 'openbsd'
-      uses: vmactions/openbsd-vm@5f7b2c933b8846a138361d6843c52af4bef5d945 # v1.4.8
+      uses: vmactions/openbsd-vm@f1ca8bc8ecc5b6ef7218e5b914836e067e1546d3 # v1.4.9
       with:
         release: ${{ inputs.vm-version }}
         usesh: true