diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9a9b4b9..f84c9ee 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -162,7 +162,7 @@ jobs:
         with:
           shared-key: ci
           save-if: ${{ env.RUST_CACHE_SAVE_IF }}
-      - uses: taiki-e/install-action@5488ac5a951645ce95062214902ac4b6bc1a1037 # v2.87.32
+      - uses: taiki-e/install-action@68a389c788b2cd04016ce8c80ee23b80d2ab3d68 # v2.88.1
         with:
           tool: cargo-nextest
       - uses: dtolnay/rust-toolchain@b725eda525362e7cf34af9a7243cac1e3f01a7ec # stable
diff --git a/.github/workflows/policy.yml b/.github/workflows/policy.yml
index 5b5638e..e9599d9 100644
--- a/.github/workflows/policy.yml
+++ b/.github/workflows/policy.yml
@@ -44,7 +44,7 @@ jobs:
           else
             echo "run=true" >> "$GITHUB_OUTPUT"
           fi
-      - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29
+      - uses: taiki-e/install-action@68a389c788b2cd04016ce8c80ee23b80d2ab3d68 # v2.88.1
         if: github.event_name != 'pull_request' || steps.dependency-policy.outputs.run == 'true'
         with:
           tool: cargo-deny@0.20.2
diff --git a/.github/workflows/release-dry-run.yml b/.github/workflows/release-dry-run.yml
index 1e12d01..44cba7c 100644
--- a/.github/workflows/release-dry-run.yml
+++ b/.github/workflows/release-dry-run.yml
@@ -308,7 +308,7 @@ jobs:
       issues: write
     steps:
       - name: Open or update the tracking issue
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const title = '[CI] Release dry run is failing';