diff --git a/.github/workflows/update_and_publish.yml b/.github/workflows/update_and_publish.yml
index 8e85f46..1d1886b 100644
--- a/.github/workflows/update_and_publish.yml
+++ b/.github/workflows/update_and_publish.yml
@@ -16,7 +16,7 @@ jobs:
       new_sha: ${{ steps.commit.outputs.new_sha }}
     steps:
     - name: Checkout code
-      uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871  # v4.2.1
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
     - name: Download latest IERS files
       run: ./update_data.sh
     - name: Check for changes
@@ -28,7 +28,7 @@ jobs:
           echo "changed=false" > $GITHUB_OUTPUT
         fi
 
-    - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3  # v5.2.0
+    - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b  # v5.3.0
       if: steps.check.outputs.changed
       with:
         python-version: '3.x'
@@ -75,7 +75,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871  # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
         with:
           ref: ${{ needs.update.outputs.new_sha }}
       - name: Get tag name from date
@@ -90,7 +90,7 @@ jobs:
           custom_tag: ${{ steps.tag_name.outputs.version }}
           tag_prefix: ""
       - name: Create GitHub release
-        uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191  # v2.0.8
+        uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8  # v2.0.9
         with:
           tag_name: ${{ steps.tag_name.outputs.version }}
           generate_release_notes: true