diff --git a/.github/workflows/basic-qa.yml b/.github/workflows/basic-qa.yml
index b940f4f26b..bac9cf4063 100644
--- a/.github/workflows/basic-qa.yml
+++ b/.github/workflows/basic-qa.yml
@@ -279,4 +279,4 @@ jobs:
           persist-credentials: false
 
       - name: "Search for misspellings"
-        uses: "crate-ci/typos@d43b6c087ac471e2ea7b8af622ff15f05c0c365b" # v1.50.1
+        uses: "crate-ci/typos@512fc24f32f44ab01972217aaaf3dc86ec234d53" # v1.50.2
diff --git a/.github/workflows/quicktest.yml b/.github/workflows/quicktest.yml
index d43d33206f..e34d849847 100644
--- a/.github/workflows/quicktest.yml
+++ b/.github/workflows/quicktest.yml
@@ -77,7 +77,7 @@ jobs:
 
       - name: Send coverage report to Codecov
         if: ${{ success() && github.event.repository.fork == false && github.ref_name == 'develop' }}
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           files: ./build/logs/clover.xml
           fail_ci_if_error: true
diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index 5f3ba45a55..f33f6964a6 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -139,7 +139,7 @@ jobs:
 
       - name: Send coverage report to Codecov
         if: ${{ success() && matrix.coverage == true && github.event.repository.fork == false }}
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           files: ./build/logs/clover.xml
           fail_ci_if_error: true