diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index cae630f..846b702 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -463,7 +463,7 @@ jobs:
       # Pinned, prebuilt cargo-audit binary — a couple of seconds to install
       # and decoupled from the project lockfile so the cache doesn't bust on
       # every unrelated PR. Bump the version deliberately.
-      - uses: taiki-e/install-action@9545a0634ccdca487a09cde61d362f0bc5fb5df9 # v2.61.4
+      - uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2.83.2
         with:
           tool: cargo-audit@0.22.1
 
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 9d90e95..fb7f2c7 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -52,7 +52,7 @@ jobs:
           RUSTDOCFLAGS: "-D warnings"
         run: cargo doc --no-deps --workspace --manifest-path turbo/Cargo.toml
 
-      - uses: taiki-e/install-action@9545a0634ccdca487a09cde61d362f0bc5fb5df9 # v2.61.4
+      - uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2.83.2
         with:
           tool: cargo-audit@0.22.1
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8bc8a17..6560d7d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -181,7 +181,7 @@ jobs:
           cat RELEASE_NOTES.md
 
       - name: Create Release
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
         with:
           files: |
             turbolang-aarch64-apple-darwin/*.tar.gz