diff --git a/.github/workflows/build_benchmark.yml b/.github/workflows/build_benchmark.yml
index ec8ad10f5..03077b471 100644
--- a/.github/workflows/build_benchmark.yml
+++ b/.github/workflows/build_benchmark.yml
@@ -123,7 +123,7 @@ jobs:
           echo "APK_X86_64_SHA=$sha" >> $GITHUB_OUTPUT
 
       - name: Upload artifacts
-        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
           path: "**/*.apk"
           retention-days: 90
diff --git a/.github/workflows/build_check.yml b/.github/workflows/build_check.yml
index a9acf7895..d1c454629 100644
--- a/.github/workflows/build_check.yml
+++ b/.github/workflows/build_check.yml
@@ -96,7 +96,7 @@ jobs:
           mv app/build/outputs/apk/standard/release/app-standard-universal-release-unsigned-signed.apk Komikku-$version_tag-r$commit_count.apk
 
       - name: Upload APK
-        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
           name: Komikku-${{ steps.current_commit.outputs.VERSION_TAG }}-r${{ steps.current_commit.outputs.COMMIT_COUNT }}.apk
           path: ./*.apk
diff --git a/.github/workflows/build_preview.yml b/.github/workflows/build_preview.yml
index 4eb703996..d073498fd 100644
--- a/.github/workflows/build_preview.yml
+++ b/.github/workflows/build_preview.yml
@@ -158,7 +158,7 @@ jobs:
         run: ./gradlew testReleaseUnitTest testStandardPreviewUnitTest
 
       - name: Upload artifacts
-        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
           path: "**/*.apk"
           retention-days: 1
@@ -170,7 +170,7 @@ jobs:
       - build-app
     steps:
       - name: Download artifacts
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
         with:
           merge-multiple: true
 
diff --git a/.github/workflows/build_pull_request.yml b/.github/workflows/build_pull_request.yml
index ec26a21f3..830cd1a98 100644
--- a/.github/workflows/build_pull_request.yml
+++ b/.github/workflows/build_pull_request.yml
@@ -100,7 +100,7 @@ jobs:
           mv app/build/outputs/apk/standard/release/app-standard-universal-release-unsigned-signed.apk Komikku-$version_tag-r$commit_count.apk
 
       - name: Upload APK
-        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
           name: Komikku-${{ steps.current_commit.outputs.VERSION_TAG }}-r${{ steps.current_commit.outputs.COMMIT_COUNT }}.apk
           path: ./*.apk
diff --git a/.github/workflows/build_pull_request_forked.yml b/.github/workflows/build_pull_request_forked.yml
index 394567cd0..1f64cc2d6 100644
--- a/.github/workflows/build_pull_request_forked.yml
+++ b/.github/workflows/build_pull_request_forked.yml
@@ -77,7 +77,7 @@ jobs:
           mv app/build/outputs/apk/dev/debug/app-dev-universal-debug.apk Komikku-$version_tag-d$commit_count.apk
 
       - name: Upload APK
-        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
           name: Komikku-${{ steps.current_commit.outputs.VERSION_TAG }}-r${{ steps.current_commit.outputs.COMMIT_COUNT }}.apk
           path: ./*.apk
diff --git a/.github/workflows/build_release.yml b/.github/workflows/build_release.yml
index c11b47cc9..26d940877 100644
--- a/.github/workflows/build_release.yml
+++ b/.github/workflows/build_release.yml
@@ -131,7 +131,7 @@ jobs:
         run: ./gradlew testReleaseUnitTest testStandardReleaseUnitTest
 
       - name: Upload artifacts
-        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
           path: "**/*.apk"
           retention-days: 1
@@ -143,7 +143,7 @@ jobs:
       - build-app
     steps:
       - name: Download artifacts
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
         with:
           merge-multiple: true
 
diff --git a/.github/workflows/pr_label.yml b/.github/workflows/pr_label.yml
index c436ae549..1c27bb478 100644
--- a/.github/workflows/pr_label.yml
+++ b/.github/workflows/pr_label.yml
@@ -10,7 +10,7 @@ jobs:
 
     steps:
       - name: Check PR and Add Label
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
         with:
           script: |
             const prAuthor = context.payload.pull_request.user.login;