diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d897e5a..b23c05b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2.2.0
@@ -32,7 +32,7 @@ jobs:
           bun-version: latest
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6.4.0
+        uses: actions/setup-node@v7.0.0
         with:
           node-version: 24
           package-manager-cache: false
@@ -75,7 +75,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
 
       - name: Review dependency changes
         uses: actions/dependency-review-action@v5.0.0
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e42cf2b..a914105 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
 
@@ -42,7 +42,7 @@ jobs:
           bun-version: latest
 
       - name: Setup Node.js for npm trusted publishing
-        uses: actions/setup-node@v6.4.0
+        uses: actions/setup-node@v7.0.0
         with:
           node-version: 24
           registry-url: "https://registry.npmjs.org"
@@ -87,7 +87,7 @@ jobs:
 
       - name: Create or update version PR
         if: github.ref == 'refs/heads/main' && !(github.event_name == 'workflow_dispatch' && inputs.dry_run) && steps.changesets.outputs.pending == 'true'
-        uses: changesets/action@v1
+        uses: changesets/action@v2
         with:
           version: bun run version-packages
         env: