diff --git a/.github/actions/with-post-step/action.yml b/.github/actions/with-post-step/action.yml
index 7b09243..42e2c0f 100644
--- a/.github/actions/with-post-step/action.yml
+++ b/.github/actions/with-post-step/action.yml
@@ -10,6 +10,6 @@ inputs:
     required: true
 
 runs:
-  using: node20
+  using: node24
   main: main.js
   post: main.js
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 4b753cc..de3a858 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -8,7 +8,7 @@ jobs:
     name: "pre-commit"
     runs-on: ubuntu-latest
     steps:
-      - uses: SonarSource/gh-action_pre-commit@0ecedc4e4070444a95f6b6714ddc3ebcdde697c4 # 1.1.0
+      - uses: SonarSource/gh-action_pre-commit@2ddc0c7fdabce0adfaaa4075a17690972ed9961a # 1.2.0
         with:
           extra-args: >
             --from-ref=origin/${{ github.event.pull_request.base.ref }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index d11990a..5730b3b 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -15,10 +15,10 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
-      - uses: jdx/mise-action@146a28175021df8ca24f8ee1828cc2a60f980bd5 # v3.5.1
+      - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1
         with:
           version: 2026.1.0
       - name: Run ShellSpec tests
diff --git a/action.yml b/action.yml
index 8484ed4..01f4b3d 100644
--- a/action.yml
+++ b/action.yml
@@ -12,7 +12,7 @@ runs:
   steps:
     - name: Get secrets from Vault
       id: secrets
-      uses: SonarSource/vault-action-wrapper@320bd31b03e5dacaac6be51bbbb15adf7caccc32 # 3.1.0
+      uses: SonarSource/vault-action-wrapper@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 # 3.5.0
       with:
         secrets: |
           development/kv/data/cloudflare/warp-github-runner client-id | CLOUDFLARE_AUTH_CLIENT_ID;