diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 18962da..dde1cae 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -125,7 +125,7 @@ jobs:
         with:
           toolchain: stable
       - name: cargo install cargo-hack
-        uses: taiki-e/install-action@2ca9b94c269419b7b0c711c09d0b21c4e1d51145 # tag=v2.83.1
+        uses: taiki-e/install-action@07b4745e0c39a41822af610387492e3e53aa222b # tag=v2.83.4
         with:
           tool: cargo-hack
       # intentionally no target specifier; see https://github.com/jonhoo/rust-ci-conf/pull/4
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a5ddc31..1274b0c 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -154,7 +154,7 @@ jobs:
           toolchain: stable
           components: llvm-tools-preview
       - name: cargo install cargo-llvm-cov
-        uses: taiki-e/install-action@2ca9b94c269419b7b0c711c09d0b21c4e1d51145 # tag=v2.83.1
+        uses: taiki-e/install-action@07b4745e0c39a41822af610387492e3e53aa222b # tag=v2.83.4
         with:
           tool: cargo-llvm-cov
       - name: cargo generate-lockfile