diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
index 720d286..4100787 100644
--- a/.github/workflows/ci-build.yml
+++ b/.github/workflows/ci-build.yml
@@ -14,12 +14,12 @@ jobs:
     name: windows-latest
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: 'Setup Java JDK 11'
-        uses: actions/setup-java@v4.7.1
+        uses: actions/setup-java@v5.7.0
         with:
           distribution: 'microsoft'
           java-version: '11'
@@ -30,7 +30,7 @@ jobs:
           dotnet workload install android ios tvos macos maui maccatalyst wasm-tools-net7 
 
       - name: 'Cache: .nuke/temp, ~/.nuget/packages'
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: |
             .nuke/temp
diff --git a/.github/workflows/lock.yml b/.github/workflows/lock.yml
index 3f79ecb..58d7882 100644
--- a/.github/workflows/lock.yml
+++ b/.github/workflows/lock.yml
@@ -16,7 +16,7 @@ jobs:
   action:
     runs-on: ubuntu-latest
     steps:
-      - uses: dessant/lock-threads@v5
+      - uses: dessant/lock-threads@89ae32b08ed1a541efecbab17912962a5e38981c # v6
         with:
           github-token: ${{ github.token }}
           issue-inactive-days: '14'