diff --git a/.github/workflows/semantic-release.yml b/.github/workflows/semantic-release.yml
index 0938b53..8cb3f87 100644
--- a/.github/workflows/semantic-release.yml
+++ b/.github/workflows/semantic-release.yml
@@ -42,7 +42,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node-version }}
 
diff --git a/.github/workflows/semver-container.yml b/.github/workflows/semver-container.yml
index f8be5f2..d37f3d0 100644
--- a/.github/workflows/semver-container.yml
+++ b/.github/workflows/semver-container.yml
@@ -69,7 +69,7 @@ jobs:
       # before attempting to retag it. Fails fast rather than producing a misleading error
       # from the tag-push step if the publish-container workflow hasn't run yet.
       - name: Check image exists for commit
-        uses: tyriis/docker-image-tag-exists@2cb38c7c5868e9f50e870230718100ad912aac67 # v3.0.0
+        uses: tyriis/docker-image-tag-exists@e73c8fdfab85076cdcf2ce4b443181fae2153675 # v2026.6.0
         with:
           registry: ${{ env.registry }}
           repository: ${{ env.REPO_OWNER_LOWER }}/${{ env.image-name }}