diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 412460f..7dbbfae 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -21,7 +21,7 @@ jobs:
     steps:
 
       - name: Run Release Please
-        uses: google-github-actions/release-please-action@ca6063f4ed81b55db15b8c42d1b6f7925866342d # v3.7.11
+        uses: google-github-actions/release-please-action@4c5670f886fe259db4d11222f7dff41c1382304d # v3.7.12
         id: r
         with:
           release-type: simple
diff --git a/.github/workflows/reusable-terraform-plan-apply.yml b/.github/workflows/reusable-terraform-plan-apply.yml
index 480423e..54feee1 100644
--- a/.github/workflows/reusable-terraform-plan-apply.yml
+++ b/.github/workflows/reusable-terraform-plan-apply.yml
@@ -91,7 +91,7 @@ jobs:
     steps:
 
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           ref: ${{ inputs.git_ref }}
 
@@ -139,7 +139,7 @@ jobs:
 
       - if: ${{ inputs.configure_aws_credentials }}
         name: Configure AWS credentials using OIDC
-        uses: aws-actions/configure-aws-credentials@8c3f20df09ac63af7b3ae3d7c91f105f857d8497 # v4.0.0
+        uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1
         with:
           aws-region: ${{ inputs.region }}
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
@@ -147,7 +147,7 @@ jobs:
 
 
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           ref: ${{ inputs.git_ref }}
 
@@ -310,7 +310,7 @@ jobs:
 
       - if: ${{ inputs.configure_aws_credentials }}
         name: Configure AWS credentials using OIDC (if enabled)
-        uses: aws-actions/configure-aws-credentials@8c3f20df09ac63af7b3ae3d7c91f105f857d8497 # v4.0.0
+        uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1
         with:
           aws-region: ${{ inputs.region }}
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}