diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index b2d9969b22b..121b682477b 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -23,10 +23,10 @@ jobs:
           persist-credentials: false
 
       - name: Run pre-commit hooks
-        uses: j178/prek-action@v2
+        uses: j178/prek-action@v2.0.2
 
       - name: Check spelling
-        uses: j178/prek-action@v2
+        uses: j178/prek-action@v2.0.2
         continue-on-error: true
         with:
           extra_args: --all-files --hook-stage manual codespell
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a05eeb14025..35a649bf0c5 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -63,7 +63,7 @@ jobs:
           uvx --with tox-uv tox -e py -- -v --cov-report term
 
       - name: Upload coverage
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v6
         with:
           flags: ${{ matrix.os }}
           name: ${{ matrix.os }} Python ${{ matrix.python-version }}