diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml
index 3dd8d677..56dfae80 100644
--- a/.github/workflows/cifuzz.yml
+++ b/.github/workflows/cifuzz.yml
@@ -10,13 +10,13 @@ jobs:
     steps:
     - name: Build fuzzers
       id: build
-      uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@061583ebb5a96653e42feb3a97ee513eedc18078 # master
+      uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@92182553173581f871130c71c71b17f003d47b0a # master
       with:
         oss-fuzz-project-name: 'fmt'
         dry-run: false
         language: c++
     - name: Run fuzzers
-      uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@061583ebb5a96653e42feb3a97ee513eedc18078 # master
+      uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@92182553173581f871130c71c71b17f003d47b0a # master
       with:
         oss-fuzz-project-name: 'fmt'
         fuzz-seconds: 300
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 2f537783..f90ec7ef 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -29,7 +29,7 @@ jobs:
         if [ -s fmt.patch ]; then
           exit 1
         fi
-    - uses: actions/github-script@e69ef5462fd455e02edcaf4dd7708eda96b9eda0 # v7
+    - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
       if: failure() && steps.clang_format.outcome == 'failure'
       with:
         script: |