diff --git a/.github/workflows/backfill-release-assets.yml b/.github/workflows/backfill-release-assets.yml
index b80a780..6a498b9 100644
--- a/.github/workflows/backfill-release-assets.yml
+++ b/.github/workflows/backfill-release-assets.yml
@@ -90,7 +90,7 @@ jobs:
           echo "vite-plus-version=${version}" >> "$GITHUB_OUTPUT"
 
       - name: Set up Vite+
-        uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
+        uses: voidzero-dev/setup-vp@1b32467adbe183473499fd9d5d372c3ed9641754 # v1.18.0
         with:
           version: ${{ steps.tool-versions.outputs.vite-plus-version }}
           node-version-file: ".node-version"
@@ -130,7 +130,7 @@ jobs:
         run: Get-ChildItem .artifacts/release
 
       - name: Upload binary assets to the GitHub release
-        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3
+        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3
         with:
           token: ${{ steps.release-bot.outputs.token }}
           tag_name: ${{ needs.validate-release-tag.outputs.tag_name }}
@@ -176,7 +176,7 @@ jobs:
           echo "vite-plus-version=${version}" >> "$GITHUB_OUTPUT"
 
       - name: Set up Vite+
-        uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
+        uses: voidzero-dev/setup-vp@1b32467adbe183473499fd9d5d372c3ed9641754 # v1.18.0
         with:
           version: ${{ steps.tool-versions.outputs.vite-plus-version }}
           node-version-file: ".node-version"
@@ -211,7 +211,7 @@ jobs:
         run: Get-ChildItem .artifacts/release
 
       - name: Upload binary assets to the GitHub release
-        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3
+        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3
         with:
           token: ${{ steps.release-bot.outputs.token }}
           tag_name: ${{ needs.validate-release-tag.outputs.tag_name }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 02b698e..3907291 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -263,7 +263,7 @@ jobs:
         run: Get-ChildItem .artifacts/release
 
       - name: Upload binary assets to the GitHub release
-        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3
+        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3
         with:
           token: ${{ steps.release-bot.outputs.token }}
           tag_name: ${{ needs.release.outputs.release_tag }}
@@ -338,7 +338,7 @@ jobs:
         run: Get-ChildItem .artifacts/release
 
       - name: Upload binary assets to the GitHub release
-        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3
+        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3
         with:
           token: ${{ steps.release-bot.outputs.token }}
           tag_name: ${{ needs.release.outputs.release_tag }}