diff --git a/.github/workflows/apm-materialize.yml b/.github/workflows/apm-materialize.yml
index a03dcab..090b222 100644
--- a/.github/workflows/apm-materialize.yml
+++ b/.github/workflows/apm-materialize.yml
@@ -44,7 +44,7 @@ jobs:
     steps:
       - name: Harden runner
         # renovate: datasource=github-tags depName=DevSecNinja/.github
-        uses: DevSecNinja/.github/actions/harden-runner@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+        uses: DevSecNinja/.github/actions/harden-runner@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
 
       - name: Generate App token
         id: app-token
@@ -119,7 +119,7 @@ jobs:
       - name: Open materialize PR
         if: steps.precheck.outputs.skip != 'true'
         # renovate: datasource=github-tags depName=DevSecNinja/.github
-        uses: DevSecNinja/.github/actions/open-pr@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+        uses: DevSecNinja/.github/actions/open-pr@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
         with:
           branch: chore/apm-materialize
           base: main
diff --git a/.github/workflows/config-sync.yml b/.github/workflows/config-sync.yml
index a972ed5..10e26cb 100644
--- a/.github/workflows/config-sync.yml
+++ b/.github/workflows/config-sync.yml
@@ -12,7 +12,7 @@ permissions:
 
 jobs:
   sync:
-    uses: DevSecNinja/.github/.github/workflows/config-sync.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+    uses: DevSecNinja/.github/.github/workflows/config-sync.yml@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index c7eca8b..9ff6196 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -12,7 +12,7 @@ permissions:
 
 jobs:
   lint:
-    uses: DevSecNinja/.github/.github/workflows/lint.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+    uses: DevSecNinja/.github/.github/workflows/lint.yml@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
     permissions:
       contents: read
       security-events: write
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 969589d..761c43e 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -31,7 +31,7 @@ concurrency:
 jobs:
   release-please:
     # renovate: datasource=github-tags depName=DevSecNinja/.github
-    uses: DevSecNinja/.github/.github/workflows/release-please.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+    uses: DevSecNinja/.github/.github/workflows/release-please.yml@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
     permissions:
       contents: write
       pull-requests: write