diff --git a/.github/workflows/validate-n-publish.yml b/.github/workflows/validate-n-publish.yml
index b7e602bf..14c7f6a2 100644
--- a/.github/workflows/validate-n-publish.yml
+++ b/.github/workflows/validate-n-publish.yml
@@ -33,14 +33,14 @@ jobs:
     runs-on: ubuntu-latest
     needs: [validate]
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0
       - name: Install and enable corepack
         run: |
           npm install -g corepack
           corepack enable
-      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
+      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
         with:
           node-version-file: .nvmrc
       - name: Install dependencies
@@ -65,13 +65,13 @@ jobs:
     if: github.event.inputs.dry_run != 'true'
     steps:
       - name: Checkout repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Install and enable corepack
         run: |
           npm install -g corepack
           corepack enable
       - name: Set up Node.js
-        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
         with:
           node-version-file: .nvmrc
       - name: Install dependencies
@@ -104,7 +104,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.inputs.dry_run != 'true'
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0
       - name: Fetch all tags
@@ -160,7 +160,7 @@ jobs:
           cat release-notes.md
       - name: Create GitHub Releases for new tags
         if: steps.notes.outputs.has_release_notes == 'true'
-        uses: softprops/action-gh-release@5be0e66d93ac7ed76da52eca8bb058f665c3a5fe # v2
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2
         with:
           tag_name: multi-package-release-${{ github.sha }}
           name: Multi-package release ${{ github.sha }}