diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index c5d6ad3..40cec50 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -17,7 +17,7 @@ jobs:
             -   name: Run tests and collect coverage
                 run: vendor/bin/pest --coverage-clover clover.xml
             -   name: Upload coverage to Codecov
-                uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+                uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
                 with:
                     token: ${{ secrets.CODECOV_TOKEN }}
                     files: clover.xml
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index cd8b4ad..f07b876 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -16,4 +16,4 @@ jobs:
             pull-requests: write
             issues: write
         steps:
-            -   uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4
+            -   uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5