diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e651af2..6e6095b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -41,4 +41,4 @@ jobs:
         run: make ci
 
       - name: Run octocov
-        uses: k1LoW/octocov-action@73d561f65d59e66899ed5c87e4621a913b5d5c20 # v1.5.0
+        uses: k1LoW/octocov-action@b3b6ee60482a667950f87553abf1df63217235d9 # v1.5.1
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index d4dd965..cdcea8e 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           go-version-file: go.mod
       - id: list
-        uses: shogo82148/actions-go-fuzz/list@1c54c662fb7d6f7f0b6f1e142c0387e93f0ea79a # v1.2.0
+        uses: shogo82148/actions-go-fuzz/list@0b7e2a3c24b3ce3217b5b3056ef14dd7b67cc698 # v1.2.1
     outputs:
       fuzz-tests: ${{steps.list.outputs.fuzz-tests}}
 
@@ -39,7 +39,7 @@ jobs:
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version-file: go.mod
-      - uses: shogo82148/actions-go-fuzz/run@1c54c662fb7d6f7f0b6f1e142c0387e93f0ea79a # v1.2.0
+      - uses: shogo82148/actions-go-fuzz/run@0b7e2a3c24b3ce3217b5b3056ef14dd7b67cc698 # v1.2.1
         with:
           packages: ${{ matrix.package }}
           fuzz-regexp: ${{ matrix.func }}
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index a063314..bd8bced 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -41,6 +41,6 @@ jobs:
       run: |
         make fulltest
     - name: Run octocov
-      uses: k1LoW/octocov-action@73d561f65d59e66899ed5c87e4621a913b5d5c20 # v1.5.0
+      uses: k1LoW/octocov-action@b3b6ee60482a667950f87553abf1df63217235d9 # v1.5.1
       with:
         config: .octocov-full.yml
diff --git a/.github/workflows/tagpr.yml b/.github/workflows/tagpr.yml
index 6783db2..1e1abe7 100644
--- a/.github/workflows/tagpr.yml
+++ b/.github/workflows/tagpr.yml
@@ -30,7 +30,7 @@ jobs:
 
       - id: run-tagpr
         name: Run tagpr
-        uses: Songmu/tagpr@84850af451fc53753c6685a3a6a2af7beef23607 # v1.18.2
+        uses: Songmu/tagpr@9bbb945b2fb025126186661e27d55485e3fc6df6 # v1.18.3
 
   assets:
     needs: tagpr
@@ -55,7 +55,7 @@ jobs:
           cache: true
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@ec59f474b9834571250b370d4735c50f8e2d1e29 # v7.0.0
+        uses: goreleaser/goreleaser-action@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 # v7.2.1
         with:
           distribution: goreleaser
           version: latest