diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 0eb4964fa3bd..6bb6b42a6ff3 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -625,7 +625,7 @@ jobs:
           sha256sum $FILES > SHA256.txt
 
       - name: Upload pre-built and doc tar archives
-        uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974 # ratchet:softprops/action-gh-release@v2.1.0
+        uses: softprops/action-gh-release@7b4da11513bf3f43f9999e90eabced41ab8bb048 # ratchet:softprops/action-gh-release@v2.2.0
         with:
           name: OTP ${{ steps.tag.outputs.vsn }}
           files: |
diff --git a/.github/workflows/osv-scanner-scheduled.yml b/.github/workflows/osv-scanner-scheduled.yml
index 0104f3ea6c66..3ca33ef91666 100644
--- a/.github/workflows/osv-scanner-scheduled.yml
+++ b/.github/workflows/osv-scanner-scheduled.yml
@@ -74,4 +74,4 @@ jobs:
         security-events: write
         # Only needs to read contents
         contents: read
-    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@19ec1116569a47416e11a45848722b1af31a857b" # ratchet:google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.0
+    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@daa2c68f50d845057895a9c300e42478481c1d26" # ratchet:google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.1