diff --git a/.github/workflows/gradle-dependency-graph.yml b/.github/workflows/gradle-dependency-graph.yml
index 4b25d67b8..912db0d85 100644
--- a/.github/workflows/gradle-dependency-graph.yml
+++ b/.github/workflows/gradle-dependency-graph.yml
@@ -21,7 +21,7 @@ jobs:
         distribution: 'temurin'
         java-version: 25
     - name: Setup Gradle
-      uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5
+      uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
       with:
         dependency-graph: 'generate-submit-and-upload'
     - run: server/gradlew --no-daemon -p server assemble
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index d31b6ef33..f315d2172 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -70,7 +70,7 @@ jobs:
 
     - name: Log in to the Container registry
       if: steps.changed_webui_files.outputs.any_changed == 'true'
-      uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+      uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
       with:
         registry: ${{ env.REGISTRY }}
         username: ${{ github.actor }}
@@ -135,7 +135,7 @@ jobs:
 
     - name: Log in to the Container registry
       if: steps.changed_server_files.outputs.any_changed == 'true'
-      uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+      uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
       with:
         registry: ${{ env.REGISTRY }}
         username: ${{ github.actor }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5959fa7d7..86e807469 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -43,7 +43,7 @@ jobs:
         persist-credentials: false
 
     - name: Log in to the Container registry
-      uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+      uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
       with:
         registry: ${{ env.REGISTRY }}
         username: ${{ github.actor }}
@@ -89,7 +89,7 @@ jobs:
       run: server/gradlew --no-daemon -p server check
 
     - name: Log in to the Container registry
-      uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+      uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
       with:
         registry: ${{ env.REGISTRY }}
         username: ${{ github.actor }}
diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml
index dc4db1c50..8ad874cb3 100644
--- a/.github/workflows/sonar.yml
+++ b/.github/workflows/sonar.yml
@@ -28,7 +28,7 @@ jobs:
         distribution: 'temurin'
         java-version: 25
     - name: Setup Gradle
-      uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5
+      uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
     - name: Generate JaCoCo test report
       run: server/gradlew --no-daemon -p server jacocoTestReport
     - name: Make server libraries directory
@@ -36,6 +36,6 @@ jobs:
     - name: Copy server libraries
       run: find ~/.gradle/caches -type f -name '*.jar' -exec cp {} server/libraries \;
     - name: SonarCloud Scan
-      uses: SonarSource/sonarqube-scan-action@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9  # v7.0.0
+      uses: SonarSource/sonarqube-scan-action@299e4b793aaa83bf2aba7c9c14bedbb485688ec4  # v7.1.0
       env:
         SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}