diff --git a/.github/workflows/lint-actions.yml b/.github/workflows/lint-actions.yml
index a1075b2..9ce5a1a 100644
--- a/.github/workflows/lint-actions.yml
+++ b/.github/workflows/lint-actions.yml
@@ -17,6 +17,6 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
         with:
           persist-credentials: false
-      - uses: reviewdog/action-actionlint@534eb894142bcf31616e5436cbe4214641c58101 # v1.61
+      - uses: reviewdog/action-actionlint@83e4ed25b168066ad8f62f5afbb29ebd8641d982 # v1.61
         with:
           fail_level: "any"
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 868a202..08b94e0 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -23,7 +23,7 @@ jobs:
       - name: Install toolchains
         uses: ./.github/actions/toolchains # zizmor: ignore[unpinned-uses]
       - uses: dtolnay/rust-toolchain@22a6a5b0f9f487c5f5587025ae9d4a1caf2a8a78 # clippy
-      - uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2
+      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
         with:
           cache-on-failure: true
       # Currently, sp1 and risc0 guest builds are skipped when it is invoked under clippy.
@@ -63,7 +63,7 @@ jobs:
         with:
           toolchain: nightly-2024-07-27
       - uses: taiki-e/install-action@1b0e852a3465a29cd0b17876f2de42a88d145e91 # cargo-hack
-      - uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2
+      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
         with:
           cache-on-failure: true
       - name: Configure sccache
diff --git a/.github/workflows/mutants.yml b/.github/workflows/mutants.yml
index 2642eb1..dfc74ec 100644
--- a/.github/workflows/mutants.yml
+++ b/.github/workflows/mutants.yml
@@ -33,7 +33,7 @@ jobs:
         run: |
           git branch -av
           git diff "origin/$DEFAULT_BRANCH" | tee git.diff
-      - uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2
+      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
       - uses: taiki-e/install-action@9903ab6feadaec33945de535fe9d181b91802a55 # v2
         name: Install `cargo-mutants`
         with:
diff --git a/.github/workflows/prover.yml b/.github/workflows/prover.yml
index 41d79db..07c79f2 100644
--- a/.github/workflows/prover.yml
+++ b/.github/workflows/prover.yml
@@ -29,7 +29,7 @@ jobs:
         uses: ./.github/actions/toolchains # zizmor: ignore[unpinned-uses]
 
       - name: Use Cargo cache
-        uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2
+        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
         with:
           cache-on-failure: true
 
diff --git a/.github/workflows/unit.yml b/.github/workflows/unit.yml
index 3bbedb2..5768d91 100644
--- a/.github/workflows/unit.yml
+++ b/.github/workflows/unit.yml
@@ -44,7 +44,7 @@ jobs:
         uses: taiki-e/install-action@9903ab6feadaec33945de535fe9d181b91802a55 # v2
         with:
           tool: cargo-llvm-cov
-      - uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2
+      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
         with:
           cache-on-failure: true
 
@@ -58,7 +58,7 @@ jobs:
         with:
           paths: "target/nextest/ci/junit.xml"
       - name: Publish Test Coverage
-        uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5.5.1
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
           files: lcov.info
@@ -82,7 +82,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@a02741459ec5e501b9843ed30b535ca0a0376ae4 # nightly
         with:
           toolchain: nightly-2024-07-27
-      - uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2
+      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
         with:
           cache-on-failure: true