diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index f06ef981..e30bf282 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -8,7 +8,7 @@ jobs:
   security_audit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions-rs/audit-check@v1
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fd5da0c9..efc89e78 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,7 +23,7 @@ jobs:
         with: { submodules: 'recursive' }
       - if: github.event_name != 'release' && github.event_name != 'workflow_dispatch'
         uses: Swatinem/rust-cache@v2
-      - uses: taiki-e/install-action@v2
+      - uses: taiki-e/install-action@v2.85.5
         with: { tool: 'just,cargo-binstall' }
       - uses: dtolnay/rust-toolchain@stable
         with: { toolchain: '1.97.0', components: 'rust-src,rust-docs,rustfmt,clippy' }
@@ -37,7 +37,7 @@ jobs:
         with: { submodules: 'recursive' }
       - if: github.event_name != 'release' && github.event_name != 'workflow_dispatch'
         uses: Swatinem/rust-cache@v2
-      - uses: taiki-e/install-action@v2
+      - uses: taiki-e/install-action@v2.85.5
         with: { tool: 'just,cargo-binstall,cargo-minimal-versions,cargo-hack' }
       - name: Read MSRV
         id: msrv
@@ -59,7 +59,7 @@ jobs:
       - uses: actions/checkout@v7
         with: { submodules: 'recursive' }
       - uses: Swatinem/rust-cache@v2
-      - uses: taiki-e/install-action@v2
+      - uses: taiki-e/install-action@v2.85.5
         with: { tool: 'just,cargo-llvm-cov' }
       - uses: dtolnay/rust-toolchain@stable
         with: { toolchain: '1.97.0', components: 'rust-src,rust-docs,rustfmt,clippy' }