diff --git a/.github/workflows/check-python-code.yaml b/.github/workflows/check-python-code.yaml
index ede09625f..16cf1d02c 100644
--- a/.github/workflows/check-python-code.yaml
+++ b/.github/workflows/check-python-code.yaml
@@ -66,7 +66,7 @@ jobs:
       # lowest-direct cell so the resolved pyspark==3.4.0 can actually start.
       - name: Set up JDK 17
         if: matrix.resolution == 'lowest-direct'
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           distribution: temurin
           java-version: '17'
diff --git a/.github/workflows/schema-pr-preview.yml b/.github/workflows/schema-pr-preview.yml
index c8e8c359c..a1304ada3 100644
--- a/.github/workflows/schema-pr-preview.yml
+++ b/.github/workflows/schema-pr-preview.yml
@@ -45,7 +45,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version-file: ${{ env.DOCS_PATH }}/package.json
 
diff --git a/.github/workflows/test-schema.yaml b/.github/workflows/test-schema.yaml
index c9088b676..bdb490d53 100644
--- a/.github/workflows/test-schema.yaml
+++ b/.github/workflows/test-schema.yaml
@@ -30,7 +30,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Go
-        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
           go-version: 1.22