diff --git a/.github/workflows/code-style.yaml b/.github/workflows/code-style.yaml
index 5f226b0..f99759a 100644
--- a/.github/workflows/code-style.yaml
+++ b/.github/workflows/code-style.yaml
@@ -19,7 +19,7 @@ jobs:
           distribution: "temurin"
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c #v5.0.2
+        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
 
       - name: Run ktlint check
         run: ./gradlew ktlintCheck
diff --git a/.github/workflows/docker-publish.yaml b/.github/workflows/docker-publish.yaml
index 719a593..245f60e 100644
--- a/.github/workflows/docker-publish.yaml
+++ b/.github/workflows/docker-publish.yaml
@@ -27,7 +27,7 @@ jobs:
           distribution: 'temurin'
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c #v5.0.2
+        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
         with:
           cache-read-only: false
 
diff --git a/.github/workflows/helm-publish.yaml b/.github/workflows/helm-publish.yaml
index 4b16e42..e5946a3 100644
--- a/.github/workflows/helm-publish.yaml
+++ b/.github/workflows/helm-publish.yaml
@@ -30,7 +30,7 @@ jobs:
           echo "oci_repo=oci://${{ env.REGISTRY }}/${OWNER,,}/charts" >> $GITHUB_OUTPUT
 
       - name: Set up Helm
-        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 #v4.3.1
+        uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0
 
       - name: Log in to GitHub Container Registry (Helm OCI)
         run: |
@@ -68,7 +68,7 @@ jobs:
             > /tmp/all-in-one.yaml
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe #2.6.1
+        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
         with:
           tag_name: ${{ steps.meta.outputs.tag }}
           name: "Chart ${{ steps.meta.outputs.version }}"