diff --git a/.github/workflows/cicd.yml b/.github/workflows/cicd.yml
index b7b0da3..aa84a05 100644
--- a/.github/workflows/cicd.yml
+++ b/.github/workflows/cicd.yml
@@ -31,8 +31,8 @@ jobs:
         with:
           toolchain: stable
           components: rustfmt,clippy
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-      - uses: Swatinem/rust-cache@f13886b937689c021905a6b90929199931d60db1 # v2.8.1
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
       # This need to be done after checkout.
       - uses: ./.github/actions/setup_gitleaks
       - name: Check "cargo fmt"
@@ -50,7 +50,7 @@ jobs:
     name: Extract crate metadata
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - name: Extract crate information
         id: crate-metadata
         shell: bash
@@ -96,7 +96,7 @@ jobs:
       with:
         toolchain: stable
         targets: ${{ matrix.job.target }}
-    - uses: taiki-e/install-action@3216b6964cbfe053bb8b9a2ef245bd9300e2061d # v2.62.14
+    - uses: taiki-e/install-action@e0db384ad69f5ba2c6dd0129d8934e0d0ba465c1 # v2.65.10
       if: matrix.job.cross == true
       with:
         tool: cross
@@ -104,7 +104,7 @@ jobs:
       if: matrix.job.cross == true
       shell: bash
       run: echo "BUILD_CMD=cross" >> $GITHUB_ENV
-    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
     - name: Build release binary
       run: $BUILD_CMD build --release --locked --verbose --all-features --target=${{ matrix.job.target }}
       env:
@@ -119,7 +119,7 @@ jobs:
       run: |
         sha256sum ${{ needs.crate-metadata.outputs.name }}-${{ matrix.job.target }}.tar.gz > ${{ needs.crate-metadata.outputs.name }}-${{ matrix.job.target }}.tar.gz.sha256
     - name: Upload release binary
-      uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2.3.3
+      uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
       with:
         files: |
           ${{ needs.crate-metadata.outputs.name }}-${{ matrix.job.target }}.tar.gz
diff --git a/.github/workflows/clippy.yml b/.github/workflows/clippy.yml
index 39e0438..890ecea 100644
--- a/.github/workflows/clippy.yml
+++ b/.github/workflows/clippy.yml
@@ -8,12 +8,12 @@ jobs:
       contents: read
       pull-requests: write
     steps:
-    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
     - uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # No semver tag.
       with:
         toolchain: stable
         components: clippy
-    - uses: Swatinem/rust-cache@f13886b937689c021905a6b90929199931d60db1 # v2.8.1
+    - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
     - uses: giraffate/clippy-action@13b9d32482f25d29ead141b79e7e04e7900281e0 # v1.0.1
       with:
         reporter: 'github-pr-check'
diff --git a/.github/workflows/secrets-scan.yml b/.github/workflows/secrets-scan.yml
index c70c287..2b057c4 100644
--- a/.github/workflows/secrets-scan.yml
+++ b/.github/workflows/secrets-scan.yml
@@ -23,7 +23,7 @@ jobs:
           echo "${SHA256_SUM} gls-${TARGET}.tar.gz" | sha256sum --check
           tar --extract --gzip --file "gls-${TARGET}.tar.gz" --verbose
           sudo install gls /usr/local/bin/gls
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       # This need to be done after checkout.
       - uses: ./.github/actions/setup_gitleaks
       - name: Scan secrets
diff --git a/.github/workflows/test-annotation.yml b/.github/workflows/test-annotation.yml
index 31bd4b8..afd925a 100644
--- a/.github/workflows/test-annotation.yml
+++ b/.github/workflows/test-annotation.yml
@@ -11,9 +11,9 @@ jobs:
       - uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # No semver tag.
         with:
           toolchain: stable
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: ./.github/actions/setup_gitleaks
-      - uses: reviewdog/action-setup@d8edfce3dd5e1ec6978745e801f9c50b5ef80252 # v1.4.0
+      - uses: reviewdog/action-setup@d8a7baabd7f3e8544ee4dbde3ee41d0011c3a93f # v1.5.0
         with:
           reviewdog_version: latest
       - name: Test apply