diff --git a/.github/workflows/build-apk.yml b/.github/workflows/build-apk.yml
index 92d0e9effa9..2528467e829 100644
--- a/.github/workflows/build-apk.yml
+++ b/.github/workflows/build-apk.yml
@@ -90,7 +90,7 @@ jobs:
 
       # Cache gradle
       - name: Cache Gradle
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 #v5.0.4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5
         with:
           path: |
             ~/.gradle/caches
@@ -134,7 +134,7 @@ jobs:
 
       # Publish the artifact
       - name: Upload artifact
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f #v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1
         with:
           name: ${{ steps.set_artifact.outputs.artifact_name }}
           path: ./${{ steps.set_artifact.outputs.artifact_name }}
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index 60794890a7d..d6c22b1132c 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -34,7 +34,7 @@ jobs:
 
       # Cache Gradle dependencies to speed up future builds
       - name: Cache Gradle dependencies
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 #v5.0.4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5
         with:
           path: |
             ~/.gradle/caches
@@ -124,7 +124,7 @@ jobs:
       # Create a branch with latest SBOM changes only if there are changes
       - name: Create or update SBOM PR
         if: steps.compare.outputs.changes == 'true'
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
           add-paths: sbom.json
           token: ${{ steps.app-token.outputs.token }}