diff --git a/.github/workflows/deploy-job.yml b/.github/workflows/deploy-job.yml
index bf31ca8..7231e4e 100644
--- a/.github/workflows/deploy-job.yml
+++ b/.github/workflows/deploy-job.yml
@@ -18,29 +18,29 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - id: 'auth'
-        uses: 'google-github-actions/auth@09cecabe1f169596b81c2ef22b40faff87acc460' # v0.9.0
+        uses: 'google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093' # v3.0.0
         with:
           token_format: 'access_token'
           workload_identity_provider: 'projects/720115777297/locations/global/workloadIdentityPools/gh-oidc-pool/providers/gh-oidc-provider'
           service_account: 'github-actions@cloud-run-playground-379503.iam.gserviceaccount.com'
       - name: Login to Artifact Registry
-        uses: docker/login-action@dd4fa0671be5250ee6f50aedf4cb05514abda2c7 # v1.14.1
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
         with:
           registry: asia-northeast1-docker.pkg.dev
           username: oauth2accesstoken
           password: ${{ steps.auth.outputs.access_token }}
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@885d1462b80bc1c1c7f0b00334ad271f09369c55 # v2.10.0
+        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
       - name: Build and push
-        uses: docker/build-push-action@1104d471370f9806843c095c1db02b5a90c5f8b6 # v3.3.1
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: "{{defaultContext}}:jobs/hello-world"
           push: true
           tags: asia-northeast1-docker.pkg.dev/cloud-run-playground-379503/playground/hello-world:latest
       - name: 'Set up Cloud SDK'
-        uses: 'google-github-actions/setup-gcloud@62d4898025f6041e16b1068643bfc5a696863587' # v1.1.0
+        uses: 'google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db' # v3.0.1
       - name: deploy job
         run: |
           gcloud components install beta
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 13e2ad7..0264cb0 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -18,29 +18,29 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - id: 'auth'
-        uses: 'google-github-actions/auth@09cecabe1f169596b81c2ef22b40faff87acc460' # v0.9.0
+        uses: 'google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093' # v3.0.0
         with:
           token_format: 'access_token'
           workload_identity_provider: 'projects/720115777297/locations/global/workloadIdentityPools/gh-oidc-pool/providers/gh-oidc-provider'
           service_account: 'github-actions@cloud-run-playground-379503.iam.gserviceaccount.com'
       - name: Login to Artifact Registry
-        uses: docker/login-action@dd4fa0671be5250ee6f50aedf4cb05514abda2c7 # v1.14.1
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
         with:
           registry: asia-northeast1-docker.pkg.dev
           username: oauth2accesstoken
           password: ${{ steps.auth.outputs.access_token }}
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@885d1462b80bc1c1c7f0b00334ad271f09369c55 # v2.10.0
+        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
       - name: Build and push
-        uses: docker/build-push-action@1104d471370f9806843c095c1db02b5a90c5f8b6 # v3.3.1
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: "{{defaultContext}}:app"
           push: true
           tags: asia-northeast1-docker.pkg.dev/cloud-run-playground-379503/playground/fastapi:latest
       - id: 'deploy'
-        uses: 'google-github-actions/deploy-cloudrun@e62f655d5754bec48078a72edc015367b01ee97b' # v1.0.2
+        uses: 'google-github-actions/deploy-cloudrun@2028e2d7d30a78c6910e0632e48dd561b064884d' # v3.0.1
         with:
           region: 'asia-northeast1'
           service: 'fastapi'