diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5026f1abc..781b35573 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,7 +21,7 @@ jobs:
           persist-credentials: false
 
       - name: Use Node.js 24.x
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 24.x
 
@@ -50,7 +50,7 @@ jobs:
           persist-credentials: false
 
       - name: Use Node.js 24.x
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 24.x
 
diff --git a/.github/workflows/deploy_to_gdrive.yml b/.github/workflows/deploy_to_gdrive.yml
index e24444ed1..0e9b6a694 100644
--- a/.github/workflows/deploy_to_gdrive.yml
+++ b/.github/workflows/deploy_to_gdrive.yml
@@ -38,7 +38,7 @@ jobs:
           path: bes-propres7-migrator
 
       - name: Use Node.js 24.x
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 24.x
 
diff --git a/.github/workflows/latex_songbook_release.yml b/.github/workflows/latex_songbook_release.yml
index 626592918..e3b25167e 100644
--- a/.github/workflows/latex_songbook_release.yml
+++ b/.github/workflows/latex_songbook_release.yml
@@ -32,7 +32,7 @@ jobs:
       contents: write # publishes the GitHub release
     steps:
       - name: Get the PDF
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: bes-songbook
           path: LaTeX/songbook
diff --git a/.github/workflows/songbook_build.yml b/.github/workflows/songbook_build.yml
index 459adb024..eff67ab07 100644
--- a/.github/workflows/songbook_build.yml
+++ b/.github/workflows/songbook_build.yml
@@ -55,7 +55,7 @@ jobs:
           exit 1
 
       - name: Use Node.js 24.x
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 24.x
 
@@ -73,7 +73,7 @@ jobs:
           latexmk_use_xelatex: true
 
       - name: Keep the PDF
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: bes-songbook
           path: LaTeX/songbook/bes-songbook.pdf