diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index fb8a5fd1..61c67e40 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -18,7 +18,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup Node.js (or other environment if needed)
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 24
       - name: Install dependencies and build site
diff --git a/.github/workflows/prek-audit.yml b/.github/workflows/prek-audit.yml
index e15519ce..f963088d 100644
--- a/.github/workflows/prek-audit.yml
+++ b/.github/workflows/prek-audit.yml
@@ -23,7 +23,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Run prek-action
-        uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0
+        uses: j178/prek-action@1382ad72dea72f9d53832f2bcb65b3e87a947204 # v3.0.1
         with:
           install-only: true
       - name: Run manual prek hooks
diff --git a/.github/workflows/prek-manual.yml b/.github/workflows/prek-manual.yml
index 27b787cc..56195375 100644
--- a/.github/workflows/prek-manual.yml
+++ b/.github/workflows/prek-manual.yml
@@ -23,7 +23,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Run prek-action
-        uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0
+        uses: j178/prek-action@1382ad72dea72f9d53832f2bcb65b3e87a947204 # v3.0.1
         with:
           install-only: true
       - name: Run manual prek hooks
diff --git a/.github/workflows/prek.yml b/.github/workflows/prek.yml
index cee9bac1..6c96146c 100644
--- a/.github/workflows/prek.yml
+++ b/.github/workflows/prek.yml
@@ -23,6 +23,6 @@ jobs:
         with:
           persist-credentials: false
       - name: Run prek-action
-        uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0
+        uses: j178/prek-action@1382ad72dea72f9d53832f2bcb65b3e87a947204 # v3.0.1
         with:
           extra-args: --all-files