diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 1cf363c..866d6bd 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -27,17 +27,17 @@ jobs:
     steps:
       - name: Set up Homebrew
         id: set-up-homebrew
-        uses: Homebrew/actions/setup-homebrew@1be15efe6e43b3c3004b8528583b8aca580ae3d8 # master
+        uses: Homebrew/actions/setup-homebrew@68fa6aeb1ccb0596d311f2b34ec74ec21ee68e54 # master
 
       - name: Set up git
-        uses: Homebrew/actions/git-user-config@1be15efe6e43b3c3004b8528583b8aca580ae3d8 # master
+        uses: Homebrew/actions/git-user-config@68fa6aeb1ccb0596d311f2b34ec74ec21ee68e54 # master
 
       - name: Pull bottles
         id: pr-pull
         run: brew pr-pull --debug --retain-bottle-dir --no-upload --tap="$GITHUB_REPOSITORY" "$PULL_REQUEST"
 
       - name: Generate build provenance
-        uses: actions/attest-build-provenance@534b352d658f90498fd148d231fdbf88f3886a3a # v1.3.1
+        uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e # v1.3.2
         with:
           subject-path: "${{ steps.pr-pull.outputs.bottle_path }}/*.tar.gz"
 
@@ -48,7 +48,7 @@ jobs:
         run: brew pr-upload --debug
 
       - name: Push commits
-        uses: Homebrew/actions/git-try-push@1be15efe6e43b3c3004b8528583b8aca580ae3d8 # master
+        uses: Homebrew/actions/git-try-push@68fa6aeb1ccb0596d311f2b34ec74ec21ee68e54 # master
         with:
           token: ${{ github.token }}
           branch: main
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 808e787..149615b 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -17,7 +17,7 @@ jobs:
     steps:
       - name: Set up Homebrew
         id: set-up-homebrew
-        uses: Homebrew/actions/setup-homebrew@1be15efe6e43b3c3004b8528583b8aca580ae3d8 # master
+        uses: Homebrew/actions/setup-homebrew@68fa6aeb1ccb0596d311f2b34ec74ec21ee68e54 # master
 
       - name: Cache Homebrew Bundler RubyGems
         id: cache