diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 2fd1a14..65d8fb6 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -33,6 +33,9 @@ updates:
     commit-message:
       prefix: "chore(ci)"
     groups:
+      codeql-action:
+        patterns:
+          - "github/codeql-action*"
       gha-patch-minor:
         patterns:
           - "*"
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 6c3c7cc..55377a6 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -27,12 +27,12 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@5e316336eb4f107009e477d4bfbfff13d7250fae
+        uses: github/codeql-action/init@0911ee96d2d6c8def97122c36c5cadd93829a4b4
         with:
           languages: ${{ matrix.language }}
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@5e316336eb4f107009e477d4bfbfff13d7250fae
+        uses: github/codeql-action/autobuild@0911ee96d2d6c8def97122c36c5cadd93829a4b4
 
       - name: Analyze
-        uses: github/codeql-action/analyze@5e316336eb4f107009e477d4bfbfff13d7250fae
+        uses: github/codeql-action/analyze@0911ee96d2d6c8def97122c36c5cadd93829a4b4