diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 32af1e2..407e04f 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -18,11 +18,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
+        uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb
       - name: Set up Rust
         run: rustup default nightly
       - name: Install development tools
-        uses: taiki-e/install-action@58a3efb22c892c0e7d722787ab604b97b62ac694
+        uses: taiki-e/install-action@cbef870e2bdcba92d24aaa2dd84ebeeca67b59a0
         with:
           tool: cargo-deny@0.16.1, cargo-udeps@0.1.50, cargo-hack@0.6.31
       - name: Install Rust linters
@@ -52,11 +52,11 @@ jobs:
           - nightly
     steps:
       - name: Check out repository
-        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
+        uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb
       - name: Set up Rust
         run: rustup default ${{ matrix.channel }}
       - name: Install development tools
-        uses: taiki-e/install-action@58a3efb22c892c0e7d722787ab604b97b62ac694
+        uses: taiki-e/install-action@cbef870e2bdcba92d24aaa2dd84ebeeca67b59a0
         with:
           tool: cargo-hack@0.6.31
       - name: Run tests
@@ -66,11 +66,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
+        uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb
       - name: Set up Rust
         run: rustup default nightly
       - name: Install development tools
-        uses: taiki-e/install-action@58a3efb22c892c0e7d722787ab604b97b62ac694
+        uses: taiki-e/install-action@cbef870e2bdcba92d24aaa2dd84ebeeca67b59a0
         with:
           tool: cargo-llvm-cov@0.6.13, cargo-hack@0.6.31
       - name: Create directories
@@ -80,7 +80,7 @@ jobs:
           cargo hack --feature-powerset llvm-cov --no-report --branch --locked --workspace
           cargo llvm-cov report --fail-under-lines 85 --lcov --output-path target/llvm-cov/lcov/${{ github.event.repository.name }}.info
       - name: Upload code coverage
-        uses: romeovs/lcov-reporter-action@87a815f34ec27a5826abba44ce09bbc688da58fd
+        uses: romeovs/lcov-reporter-action@25674467b99fc58cc7706dc246d9647a94b5ba8f
         if: github.event_name == 'pull_request'
         with:
           lcov-file: target/llvm-cov/lcov/${{ github.event.repository.name }}.info
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 157ccfd..224d4d7 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
+        uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb
       - name: Publish
         run: |
           cargo publish --locked --token ${{ secrets.CRATES_IO_TOKEN }} -p unfmt_macros