diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 13bef11..1c44421 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -42,11 +42,11 @@ jobs:
         run: vp run verify
 
       - name: Check Markdown links
-        uses: putdotio/.github/.github/actions/links@df7b05db247b9a2c0c6d9aa460353fd1ab4dd744 # v2.0.0
+        uses: putdotio/.github/.github/actions/links@32b9f2f9ac2b6b17b2be6b111ec495e079384b4c # v2.3.1
 
       - name: Scan secrets and workflows
         if: ${{ !cancelled() }}
-        uses: putdotio/.github/.github/actions/scan@df7b05db247b9a2c0c6d9aa460353fd1ab4dd744 # v2.0.0
+        uses: putdotio/.github/.github/actions/scan@32b9f2f9ac2b6b17b2be6b111ec495e079384b4c # v2.3.1
 
   release:
     if: github.event_name == 'push' && github.ref == 'refs/heads/main' && !contains(github.event.head_commit.message, '[skip ci]')
@@ -55,6 +55,6 @@ jobs:
     permissions:
       contents: read
       id-token: write
-    uses: putdotio/.github/.github/workflows/frontend-release-npm.yml@df7b05db247b9a2c0c6d9aa460353fd1ab4dd744 # v2.0.0
+    uses: putdotio/.github/.github/workflows/frontend-release-npm.yml@32b9f2f9ac2b6b17b2be6b111ec495e079384b4c # v2.3.1
     secrets:
       PUTIO_CI_APP_PRIVATE_KEY: ${{ secrets.PUTIO_CI_APP_PRIVATE_KEY }}