diff --git a/.github/workflows/check.bench.yml b/.github/workflows/check.bench.yml
index 4d3b706..73c637a 100644
--- a/.github/workflows/check.bench.yml
+++ b/.github/workflows/check.bench.yml
@@ -22,7 +22,7 @@ jobs:
       - name: Build deterministic CPU benchmarks
         run: cargo codspeed build -p bemo --bench buffers --bench handles --bench http --locked -m simulation
       - name: Track CPU performance
-        uses: CodSpeedHQ/action@f842b9a3ffe213dbb81768fd7f7eeb4dfcf1c369 # v5.4.2
+        uses: CodSpeedHQ/action@821a40cd6c80e3cfe387caf55668287addd808da # v5.5.0
         with:
           mode: simulation
           runner-version: '5.2.1'
@@ -106,7 +106,7 @@ jobs:
       - run: cargo codspeed build -p bemo --bench tls --locked -m walltime
       - run: make bench-prepare
       - name: Track TLS and end-to-end wall time
-        uses: CodSpeedHQ/action@f842b9a3ffe213dbb81768fd7f7eeb4dfcf1c369 # v5.4.2
+        uses: CodSpeedHQ/action@821a40cd6c80e3cfe387caf55668287addd808da # v5.5.0
         with:
           mode: walltime
           runner-version: '5.2.1'
diff --git a/.github/workflows/check.jvm.yml b/.github/workflows/check.jvm.yml
index 5413669..5ca0f60 100644
--- a/.github/workflows/check.jvm.yml
+++ b/.github/workflows/check.jvm.yml
@@ -23,7 +23,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: jdx/mise-action@2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca # v5.1.1
+      - uses: jdx/mise-action@08ae2a091c038e1e05ec6f5115dc5c69d5a2a6b8 # v5.1.2
         with:
           version: '2026.9.10'
       # Keep the stock JVM test matrix authoritative after Mise's development JDK.
diff --git a/.github/workflows/check.rust.yml b/.github/workflows/check.rust.yml
index fdce2b1..2123f20 100644
--- a/.github/workflows/check.rust.yml
+++ b/.github/workflows/check.rust.yml
@@ -29,7 +29,7 @@ jobs:
       - name: Check generated C exports
         if: runner.os == 'Linux'
         run: python3 tools/generate_exports.py --check
-      - uses: jdx/mise-action@2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca # v5.1.1
+      - uses: jdx/mise-action@08ae2a091c038e1e05ec6f5115dc5c69d5a2a6b8 # v5.1.2
         if: runner.os == 'Linux'
         with:
           version: '2026.9.10'