diff --git a/.github/workflows/asf-allowlist-check.yml b/.github/workflows/asf-allowlist-check.yml
index 46d7a8af..cec7d5d7 100644
--- a/.github/workflows/asf-allowlist-check.yml
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -42,4 +42,4 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: apache/infrastructure-actions/allowlist-check@f1a487181effd0b216892001abdfb524442bb24d # allowlist-check/v1.0.1
+      - uses: apache/infrastructure-actions/allowlist-check@7d3afde57801d8c9a2db9730c28ae4e036cc2ab9 # allowlist-check/v1.0.2
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index cbc4613d..c324e1a5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -57,7 +57,7 @@ jobs:
           --allow-downgrade
           --no-self-update
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
-      - uses: taiki-e/install-action@ab6895351a88b908e96a4697860d4ffea5e57dbe # v2.87.27
+      - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29
         with:
           tool: typos-cli,taplo-cli,hawkeye
       - run: cargo x lint