diff --git a/.github/workflows/acceptance.yml b/.github/workflows/acceptance.yml
index 8b74e0b..1e27308 100644
--- a/.github/workflows/acceptance.yml
+++ b/.github/workflows/acceptance.yml
@@ -178,7 +178,7 @@ jobs:
           sudo apt-get install $ADDITIONAL_PACKAGES
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2.37.0
+        uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
         with:
           php-version: ${{ matrix.php }}
           extensions: apcu, ctype, curl, exif, fileinfo, gd, iconv, imagick, intl, json, mbstring, memcached, pdo, posix, simplexml, xml, zip, smbclient, ldap, krb5
diff --git a/.github/workflows/calens.yml b/.github/workflows/calens.yml
index 59679f8..c90f6ba 100644
--- a/.github/workflows/calens.yml
+++ b/.github/workflows/calens.yml
@@ -32,7 +32,7 @@ jobs:
           persist-credentials: false
 
       - name: Generate changelog
-        uses: actionhippie/calens@47874e094545538f669a17646e7963ceebdeed11 # v1.13.3
+        uses: actionhippie/calens@0b8ceba55a72f5ef8b7d910698fcd28be8bb8c19 # v1.13.4
         with:
           target: ${{ inputs.target }}
 
@@ -47,7 +47,7 @@ jobs:
       - name: Generate GitHub App token
         id: app-token
         if: github.ref == format('refs/heads/{0}', inputs.branch)
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
           client-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
diff --git a/.github/workflows/js-unit.yml b/.github/workflows/js-unit.yml
index a06b9d5..fb3e99a 100644
--- a/.github/workflows/js-unit.yml
+++ b/.github/workflows/js-unit.yml
@@ -77,7 +77,7 @@ jobs:
           echo "DISPLAY=:99.0" >> $GITHUB_ENV
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2.37.0
+        uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
         with:
           php-version: ${{ inputs.php-version }}
           extensions: apcu, ctype, curl, exif, fileinfo, gd, iconv, imagick, intl, json, mbstring, memcached, pdo, posix, simplexml, xml, zip, smbclient, ldap, krb5
diff --git a/.github/workflows/php-codestyle.yml b/.github/workflows/php-codestyle.yml
index 49468d2..69a816c 100644
--- a/.github/workflows/php-codestyle.yml
+++ b/.github/workflows/php-codestyle.yml
@@ -103,7 +103,7 @@ jobs:
           sudo apt-get install $ADDITIONAL_PACKAGES
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2.37.0
+        uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
         with:
           php-version: ${{ matrix.php }}
           extensions: apcu, ctype, curl, exif, fileinfo, gd, iconv, imagick, intl, json, mbstring, memcached, pdo, posix, simplexml, xml, zip, smbclient, ldap, krb5
diff --git a/.github/workflows/php-unit.yml b/.github/workflows/php-unit.yml
index 6b08ad4..b3c38ac 100644
--- a/.github/workflows/php-unit.yml
+++ b/.github/workflows/php-unit.yml
@@ -141,7 +141,7 @@ jobs:
           sudo apt-get install $ADDITIONAL_PACKAGES
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2.37.0
+        uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
         with:
           php-version: ${{ matrix.php }}
           extensions: apcu, ctype, curl, exif, fileinfo, gd, iconv, imagick, intl, json, mbstring, memcached, pdo, posix, simplexml, xml, zip, smbclient, ldap, krb5
diff --git a/.github/workflows/semantic-git-message.yml b/.github/workflows/semantic-git-message.yml
index 756c530..509ab1e 100644
--- a/.github/workflows/semantic-git-message.yml
+++ b/.github/workflows/semantic-git-message.yml
@@ -17,5 +17,5 @@ jobs:
           fetch-depth: 0
 
       - name: Validate commit messages
-        uses: webiny/action-conventional-commits@faccb24fc2550dd15c0390d944379d2d8ed9690e # v1.3.1
+        uses: webiny/action-conventional-commits@7f91b1595ca1951cdb671ddc9f07a49081ec5b69 # v1.4.2
 
diff --git a/.github/workflows/translation-sync.yml b/.github/workflows/translation-sync.yml
index ee4d777..31cf782 100644
--- a/.github/workflows/translation-sync.yml
+++ b/.github/workflows/translation-sync.yml
@@ -164,7 +164,7 @@ jobs:
 
       - name: Generate GitHub App token
         id: app-token
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
           client-id: ${{ secrets.TRANSLATION_APP_ID }}
           private-key: ${{ secrets.TRANSLATION_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/trigger-docs-build.yml b/.github/workflows/trigger-docs-build.yml
index f34062b..4ac964d 100644
--- a/.github/workflows/trigger-docs-build.yml
+++ b/.github/workflows/trigger-docs-build.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - name: Generate GitHub App token
         id: app-token
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
           client-id: ${{ secrets.DOCS_TRIGGER_APP_ID }}
           private-key: ${{ secrets.DOCS_TRIGGER_APP_PRIVATE_KEY }}