diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b974a1f..b5854c8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -108,7 +108,7 @@ jobs:
 
       - name: Sign Windows binary with SignPath
         if: vars.SIGNPATH_PROJECT_SLUG != ''
-        uses: signpath/github-action-submit-signing-request@c92b958760219087e01f8d67a1669ed57afe2627 # v2.3
+        uses: signpath/github-action-submit-signing-request@f6d04783b4569d051e0c80105fe66e82819d0092 # v3.0
         with:
           api-token: ${{ secrets.SIGNPATH_API_TOKEN }}
           organization-id: 7825b39c-bb11-4b89-9458-997088c35878
@@ -133,7 +133,7 @@ jobs:
         run: sha256sum -- * > SHA256SUMS && cat SHA256SUMS
 
       - name: Create GitHub release
-        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
+        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
         with:
           name: "${{ steps.tag.outputs.provider }} ${{ steps.tag.outputs.version }}"
           files: |
@@ -158,7 +158,7 @@ jobs:
           cat Dockerfile
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
+        uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0