diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 54f1812..36420ed 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -198,7 +198,7 @@ jobs:
           name: coverage-mac
           path: .
 
-      - uses: SonarSource/sonarqube-scan-action@fd88b7d7ccbaefd23d8f36f73b59db7a3d246602 # v6
+      - uses: SonarSource/sonarqube-scan-action@ba9859eae8dd6bd29e412f25ddbbef3d032000f4 # v8.2.2
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
         with:
diff --git a/.github/workflows/mutants-sweep.yml b/.github/workflows/mutants-sweep.yml
index 7a51449..d6292f7 100644
--- a/.github/workflows/mutants-sweep.yml
+++ b/.github/workflows/mutants-sweep.yml
@@ -266,27 +266,27 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@v8
         with:
           pattern: mutants-core
           path: crates
 
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@v8
         with:
           pattern: mutants-shell-*
           path: crates
 
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@v8
         with:
           pattern: mutants-settings-*
           path: crates
 
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@v8
         with:
           pattern: mutants-mac-*
           path: crates
 
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@v8
         with:
           pattern: mutants-window-*
           path: window
diff --git a/.github/workflows/update-badge.yml b/.github/workflows/update-badge.yml
index a422c4e..4ea194c 100644
--- a/.github/workflows/update-badge.yml
+++ b/.github/workflows/update-badge.yml
@@ -22,7 +22,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
         with:
           enable-cache: false