diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 6bdee2f..5e8857f 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: github/codeql-action/init@v4
+      - uses: github/codeql-action/init@v4.37.4
         with:
           languages: python
-      - uses: github/codeql-action/analyze@v4
+      - uses: github/codeql-action/analyze@v4.37.4
diff --git a/.github/workflows/desktop.yml b/.github/workflows/desktop.yml
index 554c343..ad4c626 100644
--- a/.github/workflows/desktop.yml
+++ b/.github/workflows/desktop.yml
@@ -70,7 +70,7 @@ jobs:
           enable-cache: false
 
       - id: rust-toolchain
-        uses: dtolnay/rust-toolchain@1.97.1
+        uses: dtolnay/rust-toolchain@1.100.0
 
       - name: Install locked license tooling
         run: cargo install cargo-about --version 0.9.1 --locked --features cli