diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 84184c1d17..a5f2f60d9b 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -141,7 +141,7 @@ jobs:
 
       # Check for any typos
       - name: Check for typos
-        uses: crate-ci/typos@v1.16.26
+        uses: crate-ci/typos@v1.17.0
         with:
           config: .github/workflows/typos.toml
 
@@ -221,7 +221,7 @@ jobs:
         uses: ./.github/actions/setup-node
 
       - name: Setup Go
-        uses: buildjet/setup-go@v4
+        uses: buildjet/setup-go@v5
         with:
           # This doesn't need caching. It's super fast anyways!
           cache: false
diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml
index 2d137376a4..8293ed875d 100644
--- a/.github/workflows/security.yaml
+++ b/.github/workflows/security.yaml
@@ -122,7 +122,7 @@ jobs:
           image_name: ${{ steps.build.outputs.image }}
 
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@91713af97dc80187565512baba96e4364e983601
+        uses: aquasecurity/trivy-action@d43c1f16c00cfd3978dde6c07f4bbcf9eb6993ca
         with:
           image-ref: ${{ steps.build.outputs.image }}
           format: sarif