diff --git a/.github/workflows/auto.yml b/.github/workflows/auto.yml
index 9914e208..2d2b3087 100644
--- a/.github/workflows/auto.yml
+++ b/.github/workflows/auto.yml
@@ -18,7 +18,7 @@ jobs:
       contents: read
 
     steps:
-    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+    - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
       with:
         token: ${{ secrets.GITHUB_TOKEN }}
         persist-credentials: false
@@ -40,7 +40,7 @@ jobs:
       contents: read
 
     steps:
-    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+    - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
       with:
         token: ${{ secrets.GITHUB_TOKEN }}
         persist-credentials: false
diff --git a/.github/workflows/dispatcher.yml b/.github/workflows/dispatcher.yml
index 875d952b..15628fd3 100644
--- a/.github/workflows/dispatcher.yml
+++ b/.github/workflows/dispatcher.yml
@@ -13,7 +13,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Slash Command Dispatch
-        uses: peter-evans/slash-command-dispatch@a28ee6cd74d5200f99e247ebc7b365c03ae0ef3c # v3.0.1
+        uses: peter-evans/slash-command-dispatch@13bc09769d122a64f75aa5037256f6f2d78be8c4 # v4.0.0
         with:
           # The `public_repo` scope is required by this token to create repository_dispatch and workflow_dispatch
           # events on public repositories. The default GITHUB_TOKEN does not support the `public_repo` scope.
diff --git a/.github/workflows/handler-help.yml b/.github/workflows/handler-help.yml
index d006b6da..d5a128e6 100644
--- a/.github/workflows/handler-help.yml
+++ b/.github/workflows/handler-help.yml
@@ -13,7 +13,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Update comment
-        uses: peter-evans/create-or-update-comment@c6c9a1a66007646a28c153e2a8580a5bad27bcfa # v3.0.2
+        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           repository: ${{ github.event.client_payload.github.payload.repository.full_name }}