diff --git a/.github/workflows/lint-report.yml b/.github/workflows/lint-report.yml
index c48a11e..88a621a 100644
--- a/.github/workflows/lint-report.yml
+++ b/.github/workflows/lint-report.yml
@@ -47,13 +47,13 @@ jobs:
         run: ./gradlew lint
 
       - name: Upload SARIF for places-compose
-        uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+        uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
         with:
           sarif_file: places-compose/build/reports/lint-results.sarif
           category: places-compose
 
       - name: Upload SARIF for places-compose-demo
-        uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+        uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
         with:
           sarif_file: places-compose-demo/build/reports/lint-results.sarif
           category: places-compose-demo
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 05fc6cf..b0390ce 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -73,7 +73,7 @@ jobs:
 
     - name: Upload test reports
       if: always()
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: test-reports
         path: |