diff --git a/.github/workflows/publish-sdk.yml b/.github/workflows/publish-sdk.yml
index 0c461db2..bfd8fd9e 100644
--- a/.github/workflows/publish-sdk.yml
+++ b/.github/workflows/publish-sdk.yml
@@ -17,9 +17,9 @@ jobs:
       # Required for npm trusted publishing (OIDC). No NPM_TOKEN secret is used.
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           registry-url: https://registry.npmjs.org
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 88e4e0ea..dc2d2330 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -48,7 +48,7 @@ jobs:
             - name: Create Release Pull Request
               if: github.ref == 'refs/heads/master'
               id: changesets
-              uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0
+              uses: changesets/action@8488615a623b1b9c987934bb89eae8af6a946ac1 # v2.1.1
               with:
                   createGithubReleases: false
               env: