diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index fdb5eb6d4b..205e01c795 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -31,11 +31,11 @@ jobs:
     - uses: ./.github/actions/setup
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4.37.0
+      uses: github/codeql-action/init@v4.37.1
       with:
         languages: cpp
 
     - run: make
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4.37.0
+      uses: github/codeql-action/analyze@v4.37.1
diff --git a/.github/workflows/labeler_pr.yml b/.github/workflows/labeler_pr.yml
index f524c9b7a2..3cd0468e47 100644
--- a/.github/workflows/labeler_pr.yml
+++ b/.github/workflows/labeler_pr.yml
@@ -18,7 +18,7 @@ jobs:
         persist-credentials: false
 
     - name: "changed-files"
-      uses: actions/labeler@v6.2.0
+      uses: actions/labeler@v7.0.0
       with:
         configuration-path: .github/scripts/labeler_configuration.yml
 
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index f2633066b6..64c7f24eec 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -21,4 +21,4 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
+        uses: zizmorcore/zizmor-action@6599ee8b7a49aef6a770f63d261d214911a7ce02 # v0.6.0