diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b0265b2..6f20336 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -218,7 +218,7 @@ jobs:
           gosec -no-fail -fmt sarif -out gosec.sarif ./...
 
       - name: Upload gosec SARIF
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.4
         if: always()
         continue-on-error: true  # OK here: Code Scanning might not be enabled
         with:
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 36dc520..3e5b626 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -23,7 +23,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v10
+      - uses: actions/stale@v11
         with:
           # Issue settings
           stale-issue-message: |