diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f351c6c..96ca0ba 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -30,7 +30,7 @@ jobs:
       - name: Verify lockfile has no non-registry sources
         run: scripts/check-lockfile.sh
       - name: Setup pnpm
-        uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
+        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
       - name: Setup Node.js
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index a4ea69d..ebe34ab 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -59,7 +59,7 @@ jobs:
       - name: Add robots.txt for staging
         run: 'echo -e "User-agent: *\nDisallow: /" > public/robots.txt'
       - name: Deploy to Staging Repository
-        uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
+        uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4.1.0
         with:
           personal_token: ${{ secrets.CRYPTOBOT_DEPLOY_STAGING_DOCS }}
           external_repository: cryptomator/docs-staging