diff --git a/.github/workflows/publish-packages.yml b/.github/workflows/publish-packages.yml
index ebb790b4..52644a7a 100644
--- a/.github/workflows/publish-packages.yml
+++ b/.github/workflows/publish-packages.yml
@@ -61,12 +61,12 @@ jobs:
             path: dist/
       - name: Publish package to TestPyPI
         if: ${{ inputs.upload_to_test }}
-        uses: pypa/gh-action-pypi-publish@fb13cb306901256ace3dab689990e13a5550ffaa # v1.11.0
+        uses: pypa/gh-action-pypi-publish@15c56dba361d8335944d31a2ecd17d700fc7bcbc # v1.12.2
         with:
           repository_url: https://test.pypi.org/legacy/
           password: ${{ secrets.TEST_PYPI_API_TOKEN }}
       - name: Publish package to PyPI
         if: ${{ !inputs.upload_to_test }}
-        uses: pypa/gh-action-pypi-publish@fb13cb306901256ace3dab689990e13a5550ffaa # v1.11.0
+        uses: pypa/gh-action-pypi-publish@15c56dba361d8335944d31a2ecd17d700fc7bcbc # v1.12.2
         with:
           password: ${{ secrets.PYPI_API_TOKEN }}
diff --git a/.github/workflows/run-pytest.yml b/.github/workflows/run-pytest.yml
index 9013e5f0..635d1dd5 100644
--- a/.github/workflows/run-pytest.yml
+++ b/.github/workflows/run-pytest.yml
@@ -61,4 +61,4 @@ jobs:
     - name: Test with pytest
       run: |
         pytest --cov=flow --cov-config=pyproject.toml --cov-report=xml tests/ -v
-    - uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0
+    - uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7