diff --git a/.github/workflows/deep-health-alert-kind-e2e.yml b/.github/workflows/deep-health-alert-kind-e2e.yml
index c97a5ebec..3b298ef0a 100644
--- a/.github/workflows/deep-health-alert-kind-e2e.yml
+++ b/.github/workflows/deep-health-alert-kind-e2e.yml
@@ -65,7 +65,7 @@ jobs:
         uses: ./.github/actions/docker-hub-mirror
 
       - name: Set up Node.js
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: '24'
 
@@ -75,7 +75,7 @@ jobs:
           bun-version: 1.4.2
 
       - name: Install kind
-        uses: helm/kind-action@06c1ae10762d3b9c1644e7fe69596ae519e015a2 # v1.15.0
+        uses: helm/kind-action@1544676c07bb3570fcb70166beaa07c4528fd4aa # v1.15.1
         with:
           install_only: true
 
diff --git a/.github/workflows/mutation-prover-nightly.yml b/.github/workflows/mutation-prover-nightly.yml
index 370663bce..bc764dbdf 100644
--- a/.github/workflows/mutation-prover-nightly.yml
+++ b/.github/workflows/mutation-prover-nightly.yml
@@ -381,7 +381,7 @@ jobs:
       # exactly what the aggregate names.
       - name: Upload this leg's report
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: mutation-prover-report-${{ matrix.slug }}-${{ matrix.shard }}-of-${{ matrix.shards }}
           path: ${{ runner.temp }}/lane-report/
diff --git a/.github/workflows/public-hosts-kind-e2e.yml b/.github/workflows/public-hosts-kind-e2e.yml
index f59c6fc8f..1320b6b76 100644
--- a/.github/workflows/public-hosts-kind-e2e.yml
+++ b/.github/workflows/public-hosts-kind-e2e.yml
@@ -96,7 +96,7 @@ jobs:
           cache-dependency-path: packages/kn-next-operator/go.sum
 
       - name: Set up Node.js
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: '24'
 
@@ -106,7 +106,7 @@ jobs:
           bun-version: 1.4.2
 
       - name: Install kind
-        uses: helm/kind-action@06c1ae10762d3b9c1644e7fe69596ae519e015a2 # v1.15.0
+        uses: helm/kind-action@1544676c07bb3570fcb70166beaa07c4528fd4aa # v1.15.1
         with:
           install_only: true