diff --git a/.github/workflows/externalworkloads.yaml b/.github/workflows/externalworkloads.yaml
index 3b2bf341a6..bc9d337d4e 100644
--- a/.github/workflows/externalworkloads.yaml
+++ b/.github/workflows/externalworkloads.yaml
@@ -106,7 +106,7 @@ jobs:
           echo "owner=${OWNER}" >> $GITHUB_OUTPUT
 
       - name: Create GCP VM
-        uses: nick-invision/retry@7152eba30c6575329ac0576536151aca5a72780e # v3.0.0
+        uses: nick-invision/retry@c97818ca39074beaea45180dba704f92496a0082 # v3.0.1
         with:
           retry_on: error
           timeout_minutes: 1
diff --git a/.github/workflows/go.yaml b/.github/workflows/go.yaml
index 9d7a8667b1..a497b432f7 100644
--- a/.github/workflows/go.yaml
+++ b/.github/workflows/go.yaml
@@ -26,7 +26,7 @@ jobs:
         go-version: 1.23.6
 
     - name: Run static checks
-      uses: golangci/golangci-lint-action@0adbc47a5910e47adb692df88187ec8c73c76778 # v6.4.0
+      uses: golangci/golangci-lint-action@818ec4d51a1feacefc42ff1b3ec25d4962690f39 # v6.4.1
       with:
         # renovate: datasource=docker depName=golangci/golangci-lint
         version: v1.64.5