diff --git a/.github/workflows/audit.yaml b/.github/workflows/audit.yaml
index 1df27cc..06bef9a 100644
--- a/.github/workflows/audit.yaml
+++ b/.github/workflows/audit.yaml
@@ -78,7 +78,7 @@ jobs:
           executable: ${{ steps.mise.outputs.executable }}
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
+        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
         with:
           run_install: false
 
diff --git a/.github/workflows/block-merge.yaml b/.github/workflows/block-merge.yaml
index f7488ce..112c8b7 100644
--- a/.github/workflows/block-merge.yaml
+++ b/.github/workflows/block-merge.yaml
@@ -16,7 +16,7 @@ jobs:
       pull-requests: write # required to read and write labels
 
     steps:
-      - uses: mheap/github-action-required-labels@0ac283b4e65c1fb28ce6079dea5546ceca98ccbe # v5.5.2
+      - uses: mheap/github-action-required-labels@23e10fde7e062233401931a0eece796cd9bf3177 # v5.6.0
         with:
           mode: exactly
           count: 0
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 3469655..f559657 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -154,7 +154,7 @@ jobs:
           executable: ${{ steps.mise.outputs.executable }}
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
+        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
         with:
           run_install: false