diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index cc54fd61..ed9b05db 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -54,4 +54,4 @@ jobs:
         uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
         with:
           subject-path: dist/*
-      - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
+      - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index f9ddce65..e578ab2b 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -14,4 +14,4 @@ jobs:
       contents: write
     runs-on: ubuntu-slim
     steps:
-      - uses: release-drafter/release-drafter@139054aeaa9adc52ab36ddf67437541f039b88e2 # v7.1.1
+      - uses: release-drafter/release-drafter@5de93583980a40bd78603b6dfdcda5b4df377b32 # v7.2.0
diff --git a/.github/workflows/templating.yml b/.github/workflows/templating.yml
index 6fad349d..ab7c1211 100644
--- a/.github/workflows/templating.yml
+++ b/.github/workflows/templating.yml
@@ -17,7 +17,7 @@ jobs:
       pull-requests: write
     steps:
       - id: create-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+        uses: actions/create-github-app-token@7bd03711494f032dfa3be3558f7dc8787b0be333 # v3.1.0
         with:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}