diff --git a/.github/workflows/cd-prod_deploy.yml b/.github/workflows/cd-prod_deploy.yml
index 7f521e49..84ad17f2 100644
--- a/.github/workflows/cd-prod_deploy.yml
+++ b/.github/workflows/cd-prod_deploy.yml
@@ -14,20 +14,20 @@ jobs:
 
     steps:
       - name: 코드 체크아웃
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: 환경변수들 등록
         run: |
           echo "${{ env.GRADLE_PROPERTIES }}" > app/gradle.properties
 
       - name: JDK 21 설정
-        uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5
         with:
           distribution: "temurin"
           java-version: "21"
 
       - name: Gradle 설정
-        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
+        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6
 
       - name: Jib로 Docker 이미지 빌드 및 푸시
         run: ./gradlew jib --build-cache --parallel
@@ -74,7 +74,7 @@ jobs:
 
 
       - name: 코드 체크아웃
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: build.gradle 버전 추출
         run: |
@@ -92,7 +92,7 @@ jobs:
           echo "DOCKER_IMAGE_NAME=${{ env.DOCKER_ID }}/${{ env.DOCKER_IMAGE_NAME }}:$VERSION" >> $GITHUB_ENV
 
       - name: 배포 파일(Docker Compose, Script, Nginx) 전송
-        uses: appleboy/scp-action@917f8b81dfc1ccd331fef9e2d61bdc6c8be94634 # v0.1.7
+        uses: appleboy/scp-action@ff85246acaad7bdce478db94a363cd2bf7c90345 # v1.0.0
         with:
           host: ${{ env.EC2_HOST }}
           username: ${{ env.EC2_USER }}
@@ -102,7 +102,7 @@ jobs:
           strip_components: 2
 
       - name: EC2에 배포
-        uses: appleboy/ssh-action@334f9259f2f8eb3376d33fa4c684fff373f2c2a6 # v0.1.10
+        uses: appleboy/ssh-action@0ff4204d59e8e51228ff73bce53f80d53301dee2 # v1.2.5
         with:
           host: ${{ env.EC2_HOST }}
           username: ${{ env.EC2_USER }}
diff --git a/.github/workflows/ci-auto-version-bump.yml b/.github/workflows/ci-auto-version-bump.yml
index bd189a1f..9dda6341 100644
--- a/.github/workflows/ci-auto-version-bump.yml
+++ b/.github/workflows/ci-auto-version-bump.yml
@@ -15,14 +15,14 @@ jobs:
 
     steps:
       - name: 토큰 발급
-        uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
         id: app-token
         with:
           app-id: ${{ vars.VERSION_BUMPER_APPID }}
           private-key: ${{ secrets.VERSION_BUMPER_SECRET }}
 
       - name: Checkout Source Branch
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           # 중요: PR의 머지된 코드가 아니라, 소스 브랜치(develop) 자체를 체크아웃해야 푸시 가능
           ref: ${{ github.head_ref }}
diff --git a/.github/workflows/ci-check-code-convention.yml b/.github/workflows/ci-check-code-convention.yml
index 7082c15d..2efbbf52 100644
--- a/.github/workflows/ci-check-code-convention.yml
+++ b/.github/workflows/ci-check-code-convention.yml
@@ -13,16 +13,16 @@ jobs:
 
     steps:
       - name: 코드 체크아웃
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: JDK 21 설정
-        uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5
         with:
           distribution: "temurin"
           java-version: "21"
 
       - name: Gradle 설정
-        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
+        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6
 
       - name: 포맷 검증 & 빌드 & 테스트
         run: ./gradlew spotlessCheck build --build-cache --parallel
diff --git a/.github/workflows/ci-update-api-docs.yml b/.github/workflows/ci-update-api-docs.yml
index 6e18e5c8..66da44b9 100644
--- a/.github/workflows/ci-update-api-docs.yml
+++ b/.github/workflows/ci-update-api-docs.yml
@@ -34,16 +34,16 @@ jobs:
 
     steps:
       - name: 코드 체크아웃
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: JDK 21 설정
-        uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5
         with:
           distribution: "temurin"
           java-version: "21"
 
       - name: Gradle 설정
-        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
+        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6
 
       - name: 애플리케이션 빌드
         run: ./gradlew :app:bootJar --build-cache --parallel -x test
@@ -97,13 +97,13 @@ jobs:
           wait $SERVER_PID 2>/dev/null || true
 
       - name: GitHub Pages 설정
-        uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
+        uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6
 
       - name: 아티팩트 업로드
-        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5
         with:
           path: docs/api
 
       - name: GitHub Pages 배포
         id: deployment
-        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5
diff --git a/.github/workflows/renovate-impact-analysis.yml b/.github/workflows/renovate-impact-analysis.yml
index 7b67db67..f6a97044 100644
--- a/.github/workflows/renovate-impact-analysis.yml
+++ b/.github/workflows/renovate-impact-analysis.yml
@@ -28,7 +28,7 @@ jobs:
 
     steps:
       - name: Checkout PR
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           # PR의 머지 결과 상태로 체크아웃하여 변경된 lockfile diff 직접 확인 가능
           ref: ${{ github.event.pull_request.head.sha }}