diff --git a/.github/workflows/codeql-actions.yml b/.github/workflows/codeql-actions.yml
index f90cebb7..ea6f3034 100644
--- a/.github/workflows/codeql-actions.yml
+++ b/.github/workflows/codeql-actions.yml
@@ -35,12 +35,12 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
         with:
           languages: actions
           build-mode: none
 
       - name: Run Analysis
-        uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
         with:
           category: "/language:actions"
diff --git a/.github/workflows/codeql-cpp.yml b/.github/workflows/codeql-cpp.yml
index 8584ea59..7ec9d3f6 100644
--- a/.github/workflows/codeql-cpp.yml
+++ b/.github/workflows/codeql-cpp.yml
@@ -102,7 +102,7 @@ jobs:
           ZSTD_CLEVEL: 19
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
         with:
           languages: c-cpp
           build-mode: manual
@@ -120,6 +120,6 @@ jobs:
           pip install . -v
 
       - name: Run Analysis
-        uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
         with:
           category: "/language:c-cpp"
diff --git a/.github/workflows/codeql-python.yml b/.github/workflows/codeql-python.yml
index 9a7662e8..71cbe0eb 100644
--- a/.github/workflows/codeql-python.yml
+++ b/.github/workflows/codeql-python.yml
@@ -45,12 +45,12 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
         with:
           languages: python
           build-mode: none
 
       - name: Run Analysis
-        uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
         with:
           category: "/language:python"
diff --git a/.github/workflows/lint-cff.yml b/.github/workflows/lint-cff.yml
index 96324e8b..aa4b0109 100644
--- a/.github/workflows/lint-cff.yml
+++ b/.github/workflows/lint-cff.yml
@@ -56,10 +56,10 @@ jobs:
           EOF
 
       - name: Setup R
-        uses: r-lib/actions/setup-r@14a7e741c1cb130261263aa1593718ba42cf443b # v2.11.2
+        uses: r-lib/actions/setup-r@bd49c52ffe281809afa6f0fecbf37483c5dd0b93 # v2.11.3
 
       - name: Add requirements
-        uses: r-lib/actions/setup-r-dependencies@14a7e741c1cb130261263aa1593718ba42cf443b # v2.11.2
+        uses: r-lib/actions/setup-r-dependencies@bd49c52ffe281809afa6f0fecbf37483c5dd0b93 # v2.11.3
 
       - name: Lint CITATION.cff
         run: Rscript -e 'cffr::cff_validate("CITATION.cff")'
diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml
index c125a318..18979258 100644
--- a/.github/workflows/wheels.yml
+++ b/.github/workflows/wheels.yml
@@ -221,7 +221,7 @@ jobs:
           fail-on-cache-miss: true
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@ee63bf16da6cddfb925f542f2c7b59ad50e93969 # v2.22.0
+        uses: pypa/cibuildwheel@d04cacbc9866d432033b1d09142936e6a0e2121a # v2.23.2
         with:
           only: ${{ matrix.wheel-config }}
         env: