diff --git a/.github/workflows/dist.yml b/.github/workflows/dist.yml
index 819261bd9d..c0856cf2d8 100644
--- a/.github/workflows/dist.yml
+++ b/.github/workflows/dist.yml
@@ -61,7 +61,7 @@ jobs:
 
       - name: Set up QEMU
         if: runner.os == 'Linux'
-        uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
+        uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
         with:
           # setup-qemu-action by default uses `tonistiigi/binfmt:latest` image,
           # which is out of date. This causes seg faults during build.
diff --git a/.github/workflows/test-python.yml b/.github/workflows/test-python.yml
index 5e0d89f7a4..cd63f683a5 100644
--- a/.github/workflows/test-python.yml
+++ b/.github/workflows/test-python.yml
@@ -116,7 +116,7 @@ jobs:
       - name: Generate xml report
         run: uv tool run --with "coverage[toml]" coverage xml
       - name: Upload test results to Codecov
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
   doctest: