diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index cfcf05d..d689361 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -33,6 +33,6 @@ jobs:
 
       - name: Publish distribution to PyPI
         if: ${{ github.event_name == 'release' }}
-        uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 #1.8.14
+        uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 #1.9.0
         with:
           password: ${{ secrets.PYPI_API_TOKEN }}
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index d01bdd5..64aeca7 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -127,6 +127,6 @@ jobs:
           poetry run coverage xml -i
 
       - name: Upload coverage report
-        uses: codecov/codecov-action@125fc84a9a348dbcf27191600683ec096ec9021c #4.4.1
+        uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 #4.5.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }}