diff --git a/.github/workflows/stack-java.yml b/.github/workflows/stack-java.yml
index 36cd553..6a05aa1 100644
--- a/.github/workflows/stack-java.yml
+++ b/.github/workflows/stack-java.yml
@@ -50,7 +50,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
+      - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
         with:
           distribution: temurin
           java-version: ${{ matrix.java }}
diff --git a/.github/workflows/stack-php.yml b/.github/workflows/stack-php.yml
index f36e55d..3f0fec7 100644
--- a/.github/workflows/stack-php.yml
+++ b/.github/workflows/stack-php.yml
@@ -46,7 +46,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
+      - uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
         with:
           php-version: ${{ matrix.php }}
           tools: composer
diff --git a/.github/workflows/stack-python.yml b/.github/workflows/stack-python.yml
index 8f46130..4b3b33c 100644
--- a/.github/workflows/stack-python.yml
+++ b/.github/workflows/stack-python.yml
@@ -56,7 +56,7 @@ jobs:
         with:
           python-version: ${{ matrix.python }}
       - if: inputs.manager == 'uv'
-        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
       - name: Install dependencies
         run: ${{ inputs.install-command }}
       - name: Run checks
diff --git a/.github/workflows/stack-ruby.yml b/.github/workflows/stack-ruby.yml
index 742ccc0..abb44e7 100644
--- a/.github/workflows/stack-ruby.yml
+++ b/.github/workflows/stack-ruby.yml
@@ -46,7 +46,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1.327.0
+      - uses: ruby/setup-ruby@651ff0d62c5c79bed6d53ec518387aae20e72c1a # v1.329.0
         with:
           ruby-version: ${{ matrix.ruby }}
           working-directory: ${{ inputs.working-directory }}