diff --git a/.github/workflows/_repository-checks.yml b/.github/workflows/_repository-checks.yml
index 4ffc885..b316387 100644
--- a/.github/workflows/_repository-checks.yml
+++ b/.github/workflows/_repository-checks.yml
@@ -33,7 +33,7 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@85b2b9fb8e3325e7a23d7d0a9d7ba5ae0f999e3e # v0.7.1
+        uses: zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd # v0.8.1
         with:
           persona: auditor
           min-severity: medium
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index fb8efe1..f475ca9 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -37,10 +37,10 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+        uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           languages: ${{ inputs.languages }}
           build-mode: ${{ inputs.build_mode }}
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+        uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
diff --git a/.github/workflows/text-quality.yml b/.github/workflows/text-quality.yml
index 3568328..e7b0a6e 100644
--- a/.github/workflows/text-quality.yml
+++ b/.github/workflows/text-quality.yml
@@ -78,7 +78,7 @@ jobs:
 
       - name: Run typos
         if: ${{ inputs.run_typos }}
-        uses: crate-ci/typos@7f9d0819ca1c008ade73f4b41fa9d258d48f605b # v1.51.1
+        uses: crate-ci/typos@4c8b7f51ca60df14e3c5ca82770dfbbe6c3dae85 # v1.52.0
         with:
           files: ${{ inputs.typos_files }}
           config: ${{ inputs.typos_config }}