diff --git a/.github/workflows/ci_main.yml b/.github/workflows/ci_main.yml
index bfacf37bd..b9e2c3b09 100644
--- a/.github/workflows/ci_main.yml
+++ b/.github/workflows/ci_main.yml
@@ -30,13 +30,13 @@ jobs:
 
       - name: Setup Java and Gradle
         id: setup-java-gradle
-        uses: ConsenSys/github-actions/java-setup-gradle@6b2259b3261b3fd364c32917b75943fce6473c1c # main
+        uses: ConsenSys/github-actions/java-setup-gradle@13686f2a2d5238304e9399bddd1ef02b0cfe45ee # main
         with:
           VERSION: '25'
 
       - name: Determine Web3Signer version
         id: project-version
-        uses: ConsenSys/github-actions/java-get-project-version@6b2259b3261b3fd364c32917b75943fce6473c1c # main
+        uses: ConsenSys/github-actions/java-get-project-version@13686f2a2d5238304e9399bddd1ef02b0cfe45ee # main
 
       # v3
       - name: Authenticate to Google Cloud
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 239259c8c..a95b5de71 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -29,7 +29,7 @@ jobs:
       # 4
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4
+        uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
         with:
           languages: java-kotlin
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -44,7 +44,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@e46ed2cbd01164d986452f91f178727624ae40d7 # v4
+        uses: github/codeql-action/autobuild@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -59,4 +59,4 @@ jobs:
 
       # 4
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4
+        uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
diff --git a/.github/workflows/renovatebot.yml b/.github/workflows/renovatebot.yml
index 9cdb40d6b..14b61c32f 100644
--- a/.github/workflows/renovatebot.yml
+++ b/.github/workflows/renovatebot.yml
@@ -21,7 +21,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Run renovatebot
-        uses: ConsenSys/github-actions/renovatebot@6b2259b3261b3fd364c32917b75943fce6473c1c # main
+        uses: ConsenSys/github-actions/renovatebot@13686f2a2d5238304e9399bddd1ef02b0cfe45ee # main
         with:
           GH_APP_ID: ${{ secrets.GH_APP_ID }}
           GH_PRIVATE_KEY: ${{ secrets.GH_PRIVATE_KEY }}