diff --git a/.github/workflows/size-report.yml b/.github/workflows/size-report.yml
index 1d8ce71..be9f751 100644
--- a/.github/workflows/size-report.yml
+++ b/.github/workflows/size-report.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
         with:
           submodules: true
           fetch-depth: 0
@@ -60,7 +60,7 @@ jobs:
         run: deno run --allow-read /tmp/measure-size.ts > /tmp/base-sizes.json
 
       - name: post size report
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const fs = require('fs');