diff --git a/.github/workflows/branded-client.yml b/.github/workflows/branded-client.yml
index aab7b0b26df..ddef52a439c 100644
--- a/.github/workflows/branded-client.yml
+++ b/.github/workflows/branded-client.yml
@@ -74,7 +74,7 @@ jobs:
 
       - name: Upload GUI test result
         if: ${{ failure() && steps.run_gui_test.outcome == 'failure' }}
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: gui-report-branded-client-${{ github.run_number }}
           path: test/gui/guiReportUpload
diff --git a/.github/workflows/gui-tests.yml b/.github/workflows/gui-tests.yml
index 88634033fa7..01b2e083594 100644
--- a/.github/workflows/gui-tests.yml
+++ b/.github/workflows/gui-tests.yml
@@ -22,7 +22,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup NodeJs
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 18
 
@@ -144,7 +144,7 @@ jobs:
 
       - name: Upload GUI test result
         if: ${{ failure() && steps.run_gui_test.outcome == 'failure' }}
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: gui-report-ocis-${{ github.run_number }}
           path: test/gui/guiReportUpload
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 8c98d9f0174..741c889f5d7 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -76,7 +76,7 @@ jobs:
         python-version: '3.12'
 
     - name: Restore cache
-      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
         path: ~/cache
         key: ${{ runner.os }}-${{ matrix.target }}
@@ -181,7 +181,7 @@ jobs:
         Copy-Item "${env:GITHUB_WORKSPACE}/.craft.shelf" "${env:GITHUB_WORKSPACE}/binaries/"
 
     - name: Upload artifacts
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: ${{ matrix.name }}
         path: ${{ github.workspace }}/binaries/*
diff --git a/.github/workflows/translate.yml b/.github/workflows/translate.yml
index a71d075511a..a145eb38384 100644
--- a/.github/workflows/translate.yml
+++ b/.github/workflows/translate.yml
@@ -79,7 +79,7 @@ jobs:
           private-key: ${{ secrets.TRANSLATION_APP_PRIVATE_KEY }}
 
       - name: Create or update translations PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
           token: ${{ steps.app-token.outputs.token }}
           branch: chore/translations-update-${{ matrix.branch }}