diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index c3cdfff..5607ae0 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -27,7 +27,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10
+      - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 # v10
         with:
           close-issue-message: ${{ inputs.close-message }}
           days-before-stale: -1
diff --git a/actions/build/action.yml b/actions/build/action.yml
index 4c8b2e6..c00bd56 100644
--- a/actions/build/action.yml
+++ b/actions/build/action.yml
@@ -21,7 +21,7 @@ runs:
   using: composite
   steps:
     - name: Set up Java ${{ inputs.java-version }}
-      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
+      uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
       with:
         java-version: ${{ inputs.java-version }}
         distribution: sapmachine
diff --git a/actions/deploy-release/action.yml b/actions/deploy-release/action.yml
index 99f1c7a..10ccfca 100644
--- a/actions/deploy-release/action.yml
+++ b/actions/deploy-release/action.yml
@@ -44,7 +44,7 @@ runs:
   using: composite
   steps:
     - name: Set up Java ${{ inputs.java-version }}
-      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
+      uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
       with:
         distribution: sapmachine
         java-version: ${{ inputs.java-version }}
diff --git a/actions/scan-with-blackduck/action.yml b/actions/scan-with-blackduck/action.yml
index 1299100..93c9acf 100644
--- a/actions/scan-with-blackduck/action.yml
+++ b/actions/scan-with-blackduck/action.yml
@@ -62,7 +62,7 @@ runs:
   using: composite
   steps:
     - name: Set up Java ${{ inputs.java-version }}
-      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
+      uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
       with:
         java-version: ${{ inputs.java-version }}
         distribution: sapmachine
@@ -89,7 +89,7 @@ runs:
       shell: bash
 
     - name: BlackDuck Security Scan
-      uses: blackduck-inc/black-duck-security-scan@659a0742e793a093377fab3117b0d90f23b04bfa # v2.9.0
+      uses: blackduck-inc/black-duck-security-scan@3fe94e4b3c3947bd21ba46b7da255d6d3638b325 # v2.10.0
       with:
         blackducksca_url: ${{ inputs.blackduck_url }}
         blackducksca_token: ${{ inputs.blackduck_token }}
diff --git a/actions/scan-with-codeql/action.yml b/actions/scan-with-codeql/action.yml
index 91fb1e3..e1278f2 100644
--- a/actions/scan-with-codeql/action.yml
+++ b/actions/scan-with-codeql/action.yml
@@ -35,7 +35,7 @@ runs:
   steps:
     - name: Set up Java ${{ inputs.java-version }}
       if: inputs.language == 'java-kotlin'
-      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
+      uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
       with:
         java-version: ${{ inputs.java-version }}
         distribution: sapmachine
diff --git a/actions/scan-with-sonar/action.yml b/actions/scan-with-sonar/action.yml
index c6850f9..ad39cf5 100644
--- a/actions/scan-with-sonar/action.yml
+++ b/actions/scan-with-sonar/action.yml
@@ -48,7 +48,7 @@ runs:
   using: composite
   steps:
     - name: Set up Java ${{ inputs.java-version }}
-      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
+      uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
       with:
         java-version: ${{ inputs.java-version }}
         distribution: sapmachine