diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index aca8bd7..d3f8e24 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -19,7 +19,7 @@ jobs:
           no-cache: true
       - run: bun install --frozen-lockfile
       - run: bun run package
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 #v7.0.2
         with:
           name: vsix
           path: ./*.vsix
@@ -36,7 +36,7 @@ jobs:
           bun-version: 1.3.12
           no-cache: true
       - run: bun install --frozen-lockfile
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 #v8.0.2
         with:
           name: vsix
           path: dist
@@ -55,7 +55,7 @@ jobs:
           bun-version: 1.3.12
           no-cache: true
       - run: bun install --frozen-lockfile
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 #v8.0.2
         with:
           name: vsix
           path: dist
diff --git a/.github/workflows/typos.yml b/.github/workflows/typos.yml
index 04512e5..e57d0a4 100644
--- a/.github/workflows/typos.yml
+++ b/.github/workflows/typos.yml
@@ -17,6 +17,6 @@ jobs:
       with:
         persist-credentials: false
     - name: Spell Check Repo
-      uses: crate-ci/typos@512fc24f32f44ab01972217aaaf3dc86ec234d53 # v1.50.2
+      uses: crate-ci/typos@7f9d0819ca1c008ade73f4b41fa9d258d48f605b # v1.51.1
       with:
         config: ./typos.toml
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index be1b9bf..1587278 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -20,4 +20,4 @@ jobs:
         with:
           persist-credentials: false
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
+        uses: zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b # v0.8.0