diff --git a/.github/workflows/code.yaml b/.github/workflows/code.yaml
index 4b2b69e..b3305c2 100644
--- a/.github/workflows/code.yaml
+++ b/.github/workflows/code.yaml
@@ -25,16 +25,16 @@ jobs:
       matrix: ${{ steps.versions.outputs.matrix }}
       latest: ${{ steps.versions.outputs.latest }}
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v5.5.0
-      - uses: arnested/go-version-action@978371bd4d8cad0f54106c8be4273e2fcdd74f57 #v1.1.23
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5.5.0
+      - uses: arnested/go-version-action@6ccff891beb7200dc4a3389378c726c75b7d4b1e #v2.1.5
         id: versions
 
   Lint:
     runs-on: ubuntu-latest
     needs: GoVersions
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v5.5.0
-      - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5.5.0
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
           go-version: ${{ needs.GoVersions.outputs.latest }}
       - name: Verify Config
@@ -49,8 +49,8 @@ jobs:
       matrix:
         go: ${{ fromJSON(needs.GoVersions.outputs.matrix) }}
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v5.5.0
-      - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5.5.0
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
           go-version: ${{ matrix.go }}
       - run: go test -race -cover -coverprofile=coverage.out -covermode=atomic ./...
@@ -58,7 +58,7 @@ jobs:
         if: always()
       - name: Upload coverage reports to Codecov
         if: ${{ !cancelled() }}
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
       - name: Upload test results to Codecov