diff --git a/.github/workflows/code-style.yml b/.github/workflows/code-style.yml
index 4595d81..bfe643a 100644
--- a/.github/workflows/code-style.yml
+++ b/.github/workflows/code-style.yml
@@ -12,10 +12,10 @@ jobs:
 
         steps:
             -   name: Checkout
-                uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+                uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
             -   name: Setup PHP
-                uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # v2
+                uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # v2
                 with:
                     php-version: 8.1
                     coverage: none # disable xdebug, pcov
diff --git a/.github/workflows/upstream-check.yml b/.github/workflows/upstream-check.yml
index 3289769..1977c12 100644
--- a/.github/workflows/upstream-check.yml
+++ b/.github/workflows/upstream-check.yml
@@ -31,13 +31,13 @@ jobs:
 
         steps:
             -   name: Checkout ${{ matrix.repo }}@${{ matrix.branch }}
-                uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+                uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
                 with:
                     repository: ${{ matrix.repo }}
                     ref: ${{ matrix.branch }}
 
             -   name: Setup PHP
-                uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # v2
+                uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # v2
                 with:
                     php-version: ${{ matrix.php }}
                     coverage: none