diff --git a/.github/workflows/bump.yaml b/.github/workflows/bump.yaml
index 55dabef..f96e6a8 100644
--- a/.github/workflows/bump.yaml
+++ b/.github/workflows/bump.yaml
@@ -207,7 +207,7 @@ jobs:
 
       - name: Setup Node
         if: contains(fromJSON('["yarn", "npm", "pnpm"]'), inputs.project-type)
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: ${{ inputs.node-version }}
 
diff --git a/setup-uv/action.yml b/setup-uv/action.yml
index a0d3bc5..31487c9 100644
--- a/setup-uv/action.yml
+++ b/setup-uv/action.yml
@@ -56,14 +56,14 @@ runs:
   steps:
     - name: Configure AWS credentials (read)
       if: inputs.codeartifact == 'read'
-      uses: aws-actions/configure-aws-credentials@cbe3b392738ccf3f987d68400dafcf4b0624a56c # v6.2.4
+      uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
       with:
         role-to-assume: ${{ inputs.codeartifact-role-read }}
         aws-region: ${{ inputs.aws-region }}
 
     - name: Configure AWS credentials (publish)
       if: inputs.codeartifact == 'publish'
-      uses: aws-actions/configure-aws-credentials@cbe3b392738ccf3f987d68400dafcf4b0624a56c # v6.2.4
+      uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
       with:
         role-to-assume: ${{ inputs.codeartifact-role-publish }}
         aws-region: ${{ inputs.aws-region }}
@@ -95,7 +95,7 @@ runs:
         echo "UV_PUBLISH_PASSWORD=${{ steps.codeartifact.outputs.token }}" >> $GITHUB_ENV
 
     - name: Setup uv
-      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
       with:
         version: ${{ inputs.uv-version }}
         python-version: ${{ inputs.python-version }}