diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 38739fe..61cb879 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -30,11 +30,11 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: github/codeql-action/init@v4.37.3
+      - uses: github/codeql-action/init@v4.37.9
         with:
           languages: javascript-typescript
           # security-extended adds lower-severity rules; worth it for a tool that
           # handles credentials and writes files from server-controlled ids.
           queries: security-extended
 
-      - uses: github/codeql-action/analyze@v4.37.3
+      - uses: github/codeql-action/analyze@v4.37.9