diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 78b6524c8c..b03d23e921 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index fb79f04128..9e4e203ea3 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -75,7 +75,7 @@ jobs:
       # upload gh-pages artifact for PRs (for inspection)
       - name: Upload gh-pages artifact
         if: github.event_name == 'pull_request'
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: gh-pages-preview
           path: ./gh-pages