diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index c3cdfff..08dc9d8 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -27,7 +27,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10
+      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10
         with:
           close-issue-message: ${{ inputs.close-message }}
           days-before-stale: -1
diff --git a/actions/build/action.yml b/actions/build/action.yml
index 4c8b2e6..b387baf 100644
--- a/actions/build/action.yml
+++ b/actions/build/action.yml
@@ -21,7 +21,7 @@ runs:
   using: composite
   steps:
     - name: Set up Java ${{ inputs.java-version }}
-      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
+      uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5
       with:
         java-version: ${{ inputs.java-version }}
         distribution: sapmachine
diff --git a/actions/deploy-release/action.yml b/actions/deploy-release/action.yml
index 405bdf8..233500d 100644
--- a/actions/deploy-release/action.yml
+++ b/actions/deploy-release/action.yml
@@ -40,7 +40,7 @@ runs:
   using: composite
   steps:
     - name: Set up Java
-      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
+      uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5
       with:
         distribution: sapmachine
         java-version: '17'
diff --git a/actions/scan-with-blackduck/action.yml b/actions/scan-with-blackduck/action.yml
index 1299100..32bdacf 100644
--- a/actions/scan-with-blackduck/action.yml
+++ b/actions/scan-with-blackduck/action.yml
@@ -62,7 +62,7 @@ runs:
   using: composite
   steps:
     - name: Set up Java ${{ inputs.java-version }}
-      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
+      uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5
       with:
         java-version: ${{ inputs.java-version }}
         distribution: sapmachine
@@ -89,7 +89,7 @@ runs:
       shell: bash
 
     - name: BlackDuck Security Scan
-      uses: blackduck-inc/black-duck-security-scan@659a0742e793a093377fab3117b0d90f23b04bfa # v2.9.0
+      uses: blackduck-inc/black-duck-security-scan@3fe94e4b3c3947bd21ba46b7da255d6d3638b325 # v2.10.0
       with:
         blackducksca_url: ${{ inputs.blackduck_url }}
         blackducksca_token: ${{ inputs.blackduck_token }}
diff --git a/actions/scan-with-codeql/action.yml b/actions/scan-with-codeql/action.yml
index 91fb1e3..973e88d 100644
--- a/actions/scan-with-codeql/action.yml
+++ b/actions/scan-with-codeql/action.yml
@@ -35,7 +35,7 @@ runs:
   steps:
     - name: Set up Java ${{ inputs.java-version }}
       if: inputs.language == 'java-kotlin'
-      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
+      uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5
       with:
         java-version: ${{ inputs.java-version }}
         distribution: sapmachine
diff --git a/actions/scan-with-sonar/action.yml b/actions/scan-with-sonar/action.yml
index c6850f9..f4e7d02 100644
--- a/actions/scan-with-sonar/action.yml
+++ b/actions/scan-with-sonar/action.yml
@@ -48,7 +48,7 @@ runs:
   using: composite
   steps:
     - name: Set up Java ${{ inputs.java-version }}
-      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
+      uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5
       with:
         java-version: ${{ inputs.java-version }}
         distribution: sapmachine