diff --git a/.github/workflows/header-check.yml b/.github/workflows/header-check.yml
index c9ca18e..1ed2655 100644
--- a/.github/workflows/header-check.yml
+++ b/.github/workflows/header-check.yml
@@ -27,4 +27,4 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Check License Header
-        uses: apache/skywalking-eyes/header@98a5d1362e26852204382ca749ed66631f15a95d # main
+        uses: apache/skywalking-eyes/header@6e368ec14f31521edc7118374773e78d2d646aeb # main
diff --git a/.github/workflows/markdown-checks.yml b/.github/workflows/markdown-checks.yml
index ce1ce80..fb124ac 100644
--- a/.github/workflows/markdown-checks.yml
+++ b/.github/workflows/markdown-checks.yml
@@ -27,7 +27,7 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Link Checker
-        uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2.8.0
+        uses: lycheeverse/lychee-action@e7477775783ea5526144ba13e8db5eec57747ce8 # v2.9.0
         with:
           # There is no security token. So, it would fail on any links which aren't public.
           args: "--verbose --no-progress **/*.md"
diff --git a/.github/workflows/skills-validate.yml b/.github/workflows/skills-validate.yml
index 6b0aba2..7a9e972 100644
--- a/.github/workflows/skills-validate.yml
+++ b/.github/workflows/skills-validate.yml
@@ -33,7 +33,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Set up Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
         with:
           python-version: "3.11"