diff --git a/.github/workflows/standard-build.yaml b/.github/workflows/standard-build.yaml
index ab249d6..476c9a9 100644
--- a/.github/workflows/standard-build.yaml
+++ b/.github/workflows/standard-build.yaml
@@ -159,7 +159,7 @@ jobs:
 
       - name: Container image meta
         id: image_meta
-        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
+        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
         with:
           images: |
             ${{ inputs.image }}
diff --git a/.github/workflows/standard-release.yaml b/.github/workflows/standard-release.yaml
index dc42131..82f0f58 100644
--- a/.github/workflows/standard-release.yaml
+++ b/.github/workflows/standard-release.yaml
@@ -63,7 +63,7 @@ jobs:
           node-version: 24
 
       - name: Semantic Release
-        uses: cycjimmy/semantic-release-action@9cc899c47e6841430bbaedb43de1560a568dfd16 # v5.0.0
+        uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0
         with:
           extra_plugins: |
             conventional-changelog-conventionalcommits@8.0.0