diff --git a/.github/workflows/deploy-web.yml b/.github/workflows/deploy-web.yml
index 0918caac..1948e88b 100644
--- a/.github/workflows/deploy-web.yml
+++ b/.github/workflows/deploy-web.yml
@@ -60,7 +60,7 @@ jobs:
         run: wasm-pack build moyo-wasm --target web --release --scope spglib
 
       - name: Setup Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: '22'
           cache: 'npm'
@@ -154,7 +154,7 @@ jobs:
 
       - name: Configure Pages
         if: github.event_name != 'pull_request'
-        uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
+        uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6
 
       - name: Upload Pages artifact
         if: github.event_name != 'pull_request'
diff --git a/.github/workflows/rw-python-tests.yaml b/.github/workflows/rw-python-tests.yaml
index 579010c5..fc3142c5 100644
--- a/.github/workflows/rw-python-tests.yaml
+++ b/.github/workflows/rw-python-tests.yaml
@@ -25,7 +25,7 @@ jobs:
         with:
           args: --release --out dist --manifest-path moyopy/Cargo.toml
           sccache: 'true'
-      - uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
+      - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
         with:
           path: ~/.cache/pip
           key: ${{ runner.os }}-pip-${{ hashFiles('moyopy/examples/requirements.txt') }}