diff --git a/.github/workflows/c-i.yaml b/.github/workflows/c-i.yaml
index f74de09..fb34f43 100644
--- a/.github/workflows/c-i.yaml
+++ b/.github/workflows/c-i.yaml
@@ -23,14 +23,14 @@ jobs:
       contents: read
     runs-on: ubuntu-24.04-${{matrix.arch}}
     steps:
-      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
+      - uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
         with:
           egress-policy: audit
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - uses: chainguard-dev/actions/apt-faster@3e8a2a226fad9e1ecbf2d359b8a7697554a4ac6d # v1.5.10
-      - uses: chainguard-dev/actions/setup-melange@3e8a2a226fad9e1ecbf2d359b8a7697554a4ac6d # v1.5.10
+      - uses: chainguard-dev/actions/apt-faster@f77a7c3431f961556be5a41e2602c450a590f3e5 # v1.5.12
+      - uses: chainguard-dev/actions/setup-melange@f77a7c3431f961556be5a41e2602c450a590f3e5 # v1.5.12
       - name: Set up Go
-        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
+        uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
         with:
           go-version-file: './go.work'
           cache-dependency-path: '**/*.sum'