diff --git a/.github/workflows/pr-spell-check.yml b/.github/workflows/pr-spell-check.yml
index 39fda16..1030f15 100644
--- a/.github/workflows/pr-spell-check.yml
+++ b/.github/workflows/pr-spell-check.yml
@@ -4,6 +4,6 @@ on:
 
 jobs:
   call-check:
-    uses: TDesignOteam/workflows/.github/workflows/reusable-spell-check.yml@c052be113452e0d8eca12d48d1922d80eceeecd3 # main
+    uses: TDesignOteam/workflows/.github/workflows/reusable-spell-check.yml@03665411530c1eeaab075891d2ae88d9fe77cbc5 # main
     with:
       config: .github/workflows/typos-config.toml
diff --git a/.github/workflows/reusable-pr-preview.yml b/.github/workflows/reusable-pr-preview.yml
index 78a930c..2ae3c9f 100644
--- a/.github/workflows/reusable-pr-preview.yml
+++ b/.github/workflows/reusable-pr-preview.yml
@@ -41,7 +41,7 @@ jobs:
           echo the preview URL is $DEPLOY_DOMAIN
           echo "url=$DEPLOY_DOMAIN" >> $GITHUB_OUTPUT
       - name: update status comment
-        uses: TDesignOteam/workflows/actions/maintain-one-comment@c052be113452e0d8eca12d48d1922d80eceeecd3 # main
+        uses: TDesignOteam/workflows/actions/maintain-one-comment@03665411530c1eeaab075891d2ae88d9fe77cbc5 # main
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           body: |
@@ -56,7 +56,7 @@ jobs:
 
       - name: The job failed
         if: ${{ failure() }}
-        uses: TDesignOteam/workflows/actions/maintain-one-comment@c052be113452e0d8eca12d48d1922d80eceeecd3 # main
+        uses: TDesignOteam/workflows/actions/maintain-one-comment@03665411530c1eeaab075891d2ae88d9fe77cbc5 # main
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           body: |
@@ -81,7 +81,7 @@ jobs:
         id: pr
         run: echo "id=$(<pr-id.txt)" >> $GITHUB_OUTPUT
       - name: The job failed
-        uses: TDesignOteam/workflows/actions/maintain-one-comment@c052be113452e0d8eca12d48d1922d80eceeecd3 # main
+        uses: TDesignOteam/workflows/actions/maintain-one-comment@03665411530c1eeaab075891d2ae88d9fe77cbc5 # main
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           body: |
diff --git a/.github/workflows/reusable-publish-npm.yml b/.github/workflows/reusable-publish-npm.yml
index cb2ee0b..0826708 100644
--- a/.github/workflows/reusable-publish-npm.yml
+++ b/.github/workflows/reusable-publish-npm.yml
@@ -116,7 +116,7 @@ jobs:
           tag_name=${ref_name//./_}
           echo "domain=https://$tag_name-$project_name.surge.sh" >> $GITHUB_OUTPUT
 
-      - uses: TDesignOteam/workflows/actions/setup-surge@c052be113452e0d8eca12d48d1922d80eceeecd3 # main
+      - uses: TDesignOteam/workflows/actions/setup-surge@03665411530c1eeaab075891d2ae88d9fe77cbc5 # main
         with:
           project: _site
           domain: ${{ steps.domain.outputs.domain }}
diff --git a/.github/workflows/reusable-spell-check.yml b/.github/workflows/reusable-spell-check.yml
index 4e39d5c..4b2b97f 100644
--- a/.github/workflows/reusable-spell-check.yml
+++ b/.github/workflows/reusable-spell-check.yml
@@ -15,6 +15,6 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Check spelling
-        uses: crate-ci/typos@aca895bf05aec0cb7dffa6f94495e923224d9f17 # v1.46.2
+        uses: crate-ci/typos@7b04f660f4ee4f048d18fd341887cf28dfbedfe2 # v1.46.3
         with:
           config: ${{ inputs.config }}
diff --git a/.github/workflows/reusable-unit-test.yml b/.github/workflows/reusable-unit-test.yml
index f021546..cf71192 100644
--- a/.github/workflows/reusable-unit-test.yml
+++ b/.github/workflows/reusable-unit-test.yml
@@ -23,7 +23,7 @@ jobs:
   check-email:
     runs-on: ubuntu-latest
     steps:
-      - uses: TDesignOteam/workflows/actions/check-email@c052be113452e0d8eca12d48d1922d80eceeecd3 # main
+      - uses: TDesignOteam/workflows/actions/check-email@03665411530c1eeaab075891d2ae88d9fe77cbc5 # main
 
   test:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/spell-check.yml b/.github/workflows/spell-check.yml
index 0f80021..81a8db6 100644
--- a/.github/workflows/spell-check.yml
+++ b/.github/workflows/spell-check.yml
@@ -14,6 +14,6 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Check spelling
-        uses: crate-ci/typos@aca895bf05aec0cb7dffa6f94495e923224d9f17 # v1.46.2
+        uses: crate-ci/typos@7b04f660f4ee4f048d18fd341887cf28dfbedfe2 # v1.46.3
         with:
           config: ${{ inputs.config }}