diff --git a/.github/workflows/header-check.yml b/.github/workflows/header-check.yml
index c9ca18e..ea9d03f 100644
--- a/.github/workflows/header-check.yml
+++ b/.github/workflows/header-check.yml
@@ -27,4 +27,4 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Check License Header
-        uses: apache/skywalking-eyes/header@98a5d1362e26852204382ca749ed66631f15a95d # main
+        uses: apache/skywalking-eyes/header@29bd646002b63bb4c0ed1648d1654c35fb8ff027 # main
diff --git a/.github/workflows/markdown-checks.yml b/.github/workflows/markdown-checks.yml
index ce1ce80..fb124ac 100644
--- a/.github/workflows/markdown-checks.yml
+++ b/.github/workflows/markdown-checks.yml
@@ -27,7 +27,7 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Link Checker
-        uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2.8.0
+        uses: lycheeverse/lychee-action@e7477775783ea5526144ba13e8db5eec57747ce8 # v2.9.0
         with:
           # There is no security token. So, it would fail on any links which aren't public.
           args: "--verbose --no-progress **/*.md"
diff --git a/.github/workflows/skills-generate.yml b/.github/workflows/skills-generate.yml
index e31c015..dcee7f4 100644
--- a/.github/workflows/skills-generate.yml
+++ b/.github/workflows/skills-generate.yml
@@ -29,7 +29,7 @@ jobs:
       contents: write
     steps:
       - name: Check out PR branch
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           ref: ${{ github.head_ref }}
 
diff --git a/.github/workflows/skills-validate.yml b/.github/workflows/skills-validate.yml
index 6b0aba2..7a9e972 100644
--- a/.github/workflows/skills-validate.yml
+++ b/.github/workflows/skills-validate.yml
@@ -33,7 +33,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Set up Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
         with:
           python-version: "3.11"