diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
index 8a7048d..5d5fe2a 100644
--- a/.github/workflows/ci-build.yml
+++ b/.github/workflows/ci-build.yml
@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   build:
-    uses: reactiveui/actions-common/.github/workflows/workflow-common-setup-and-build.yml@b285525c4af878b0fe3fbb00d9f2ae862e402395 # main
+    uses: reactiveui/actions-common/.github/workflows/workflow-common-setup-and-build.yml@3325811a4afb91b4d3430717a560b3a23063816b # main
     with:
       productNamespacePrefix: Splat.DependencyInjection
     secrets:
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 83a3486..a9a5c09 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   codeql:
-    uses: reactiveui/actions-common/.github/workflows/workflow-common-codeql.yml@b285525c4af878b0fe3fbb00d9f2ae862e402395 # main
+    uses: reactiveui/actions-common/.github/workflows/workflow-common-codeql.yml@3325811a4afb91b4d3430717a560b3a23063816b # main
     with:
       srcFolder: src
       solutionFile: Splat.DI.SourceGenerator.slnx
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3941c02..1a2d955 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ permissions:
 
 jobs:
   release:
-    uses: reactiveui/actions-common/.github/workflows/workflow-common-release.yml@b285525c4af878b0fe3fbb00d9f2ae862e402395 # main
+    uses: reactiveui/actions-common/.github/workflows/workflow-common-release.yml@3325811a4afb91b4d3430717a560b3a23063816b # main
     with:
       solutionFile: Splat.DI.SourceGenerator.slnx
       minverMinimumMajorMinor: '2.3'
@@ -45,7 +45,7 @@ jobs:
       id-token: write
     steps:
       - name: Download signed packages
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: signed-nuget
 
@@ -67,7 +67,7 @@ jobs:
 
   create-release:
     needs: [release, publish-nuget]
-    uses: reactiveui/actions-common/.github/workflows/workflow-common-create-release.yml@b285525c4af878b0fe3fbb00d9f2ae862e402395 # main
+    uses: reactiveui/actions-common/.github/workflows/workflow-common-create-release.yml@3325811a4afb91b4d3430717a560b3a23063816b # main
     with:
       version: ${{ needs.release.outputs.semver2 }}
       tag: ${{ needs.release.outputs.tag }}