diff --git a/.github/workflows/_rust-tool-check.yml b/.github/workflows/_rust-tool-check.yml
index 5d02004603..d9521ce5b0 100644
--- a/.github/workflows/_rust-tool-check.yml
+++ b/.github/workflows/_rust-tool-check.yml
@@ -114,7 +114,7 @@ jobs:
       # Install cargo subcommands AFTER the cache restore. `Swatinem/rust-cache`
       # caches `~/.cargo/bin`, so a warm cache makes this a no-op.
       - name: Install cargo tooling
-        uses: taiki-e/install-action@94c31af3204a9f15ab40b35ad084410b905bbc73 # v2
+        uses: taiki-e/install-action@f7e5d7c961414b23f5b25b2da9294395d08513ad # v2
         with:
           tool: cargo-hack,cargo-machete
 
diff --git a/.github/workflows/ci-dotnet.yml b/.github/workflows/ci-dotnet.yml
index 392ec66f67..071de98094 100644
--- a/.github/workflows/ci-dotnet.yml
+++ b/.github/workflows/ci-dotnet.yml
@@ -353,7 +353,7 @@ jobs:
         indicators: true
         output: both
 
-    - uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 # v3
+    - uses: dorny/test-reporter@d1b5dff021aa968b288b02285a8bf47471c5928a # v3
       id: test-reporter
       if: always()
       with:
diff --git a/.github/workflows/ci-rust.yml b/.github/workflows/ci-rust.yml
index 4c10533b6d..4931a96f93 100644
--- a/.github/workflows/ci-rust.yml
+++ b/.github/workflows/ci-rust.yml
@@ -75,7 +75,7 @@ jobs:
       # makes this step a no-op. Running it before the cache restore would
       # risk the restore clobbering the just-installed binary.
       - name: Install cargo tooling
-        uses: taiki-e/install-action@94c31af3204a9f15ab40b35ad084410b905bbc73 # v2
+        uses: taiki-e/install-action@f7e5d7c961414b23f5b25b2da9294395d08513ad # v2
         with:
           tool: cargo-machete,cargo-hack
 
@@ -183,7 +183,7 @@ jobs:
 
       # See `check` job above for why this step lives after the cache.
       - name: Install cargo tooling
-        uses: taiki-e/install-action@94c31af3204a9f15ab40b35ad084410b905bbc73 # v2
+        uses: taiki-e/install-action@f7e5d7c961414b23f5b25b2da9294395d08513ad # v2
         with:
           tool: cargo-llvm-cov
 
diff --git a/.github/workflows/ci-wot-codegen.yml b/.github/workflows/ci-wot-codegen.yml
index 98fdd6319b..cc177fc27f 100644
--- a/.github/workflows/ci-wot-codegen.yml
+++ b/.github/workflows/ci-wot-codegen.yml
@@ -45,7 +45,7 @@ jobs:
       - name: Test
         run: dotnet test -c Debug wot-codegen/codegen.sln --no-build --logger "trx;LogFileName=test-results.trx"
 
-      - uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 # v3
+      - uses: dorny/test-reporter@d1b5dff021aa968b288b02285a8bf47471c5928a # v3
         id: test-reporter
         if: always()
         with: