diff --git a/.github/workflows/at_server.yaml b/.github/workflows/at_server.yaml
index ffd06e917..875befeb1 100644
--- a/.github/workflows/at_server.yaml
+++ b/.github/workflows/at_server.yaml
@@ -47,7 +47,7 @@ jobs:
         with:
           sdk: ${{ matrix.dart-channel}}
 
-      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
+      - uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
         with:
           go-version: 'stable'
           cache-dependency-path: tools/osv-scanner/go.sum
diff --git a/.github/workflows/refreshcerts.yaml b/.github/workflows/refreshcerts.yaml
index bdf3d5645..c599fd436 100644
--- a/.github/workflows/refreshcerts.yaml
+++ b/.github/workflows/refreshcerts.yaml
@@ -13,7 +13,7 @@ jobs:
     name: SSL Renewal for vip.ve.atsign.zone
     steps:
       - name: Set up Python
-        uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
+        uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
         with:
           python-version: 3.9 #install the python needed
       - name: setup certinfo
diff --git a/.github/workflows/update_python_requirements.yml b/.github/workflows/update_python_requirements.yml
index e0058ab66..16507ef17 100644
--- a/.github/workflows/update_python_requirements.yml
+++ b/.github/workflows/update_python_requirements.yml
@@ -23,7 +23,7 @@ jobs:
 
     - name: Set up Python
       if: ${{ github.actor == 'dependabot[bot]' }}
-      uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
+      uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
       with:
           python-version: '3.11'