diff --git a/.github/workflows/stale-bot.yml b/.github/workflows/stale-bot.yml
index 1435140c1..3ce95d592 100644
--- a/.github/workflows/stale-bot.yml
+++ b/.github/workflows/stale-bot.yml
@@ -13,7 +13,7 @@ jobs:
     if: github.repository == 'fern-api/docs'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10
+      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10
         with:
           stale-pr-message: 'This PR is stale because it has been open 25 days with no activity. Remove stale label or comment or this will be closed in 5 days.'
           close-pr-message: 'This PR was closed because it has been inactive for 5 days after being marked stale.'
diff --git a/.github/workflows/vale.yml b/.github/workflows/vale.yml
index 79bde387c..886ea467e 100644
--- a/.github/workflows/vale.yml
+++ b/.github/workflows/vale.yml
@@ -28,7 +28,7 @@ jobs:
             fern/**/*.mdx
           files_ignore: |
             **/changelog/**
-      - uses: errata-ai/vale-action@d89dee975228ae261d22c15adcd03578634d429c # v2.1.1
+      - uses: errata-ai/vale-action@85f9f7f2c5f449ac0ae5b66662961bae3f77ca6a # v2.1.2
         if: steps.changed-files.outputs.any_changed == 'true'
         with:
           files: ${{ steps.changed-files.outputs.all_changed_files }}
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 3929dd35f..17823e810 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -21,4 +21,4 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
+        uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6