diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index c114c91..433123a 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -18,7 +18,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup Node.js (or other environment if needed)
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
       - name: Install dependencies and build site
diff --git a/.github/workflows/pre-commit-audit.yml b/.github/workflows/pre-commit-audit.yml
index dbaa578..bff1fb2 100644
--- a/.github/workflows/pre-commit-audit.yml
+++ b/.github/workflows/pre-commit-audit.yml
@@ -22,7 +22,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Run prek-action
-        uses: j178/prek-action@53276d8b0d10f8b6672aa85b4588c6921d0370cc # v2.0.1
+        uses: j178/prek-action@cbc2f23eb5539cf20d82d1aabd0d0ecbcc56f4e3 # v2.0.2
         with:
           install-only: true
       - name: Run manual prek hooks
diff --git a/.github/workflows/pre-commit-manual.yml b/.github/workflows/pre-commit-manual.yml
index f1f41b0..2e16ff0 100644
--- a/.github/workflows/pre-commit-manual.yml
+++ b/.github/workflows/pre-commit-manual.yml
@@ -22,7 +22,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Run prek-action
-        uses: j178/prek-action@53276d8b0d10f8b6672aa85b4588c6921d0370cc # v2.0.1
+        uses: j178/prek-action@cbc2f23eb5539cf20d82d1aabd0d0ecbcc56f4e3 # v2.0.2
         with:
           install-only: true
       - name: Run manual prek hooks
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index b004cd7..8f76f36 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -22,6 +22,6 @@ jobs:
         with:
           persist-credentials: false
       - name: Run prek-action
-        uses: j178/prek-action@53276d8b0d10f8b6672aa85b4588c6921d0370cc # v2.0.1
+        uses: j178/prek-action@cbc2f23eb5539cf20d82d1aabd0d0ecbcc56f4e3 # v2.0.2
         with:
           extra-args: --all-files