diff --git a/.github/workflows/go.yaml b/.github/workflows/go.yaml
index 99db2bbe..8f62b8cf 100644
--- a/.github/workflows/go.yaml
+++ b/.github/workflows/go.yaml
@@ -47,7 +47,7 @@ jobs:
           # we always use the latest patch version.
           version: v2.14.0
       - name: Install GoReleaser
-        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
+        uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
         with:
           install-only: true
       - name: Show GoReleaser version
diff --git a/.github/workflows/release-sandbox.yaml b/.github/workflows/release-sandbox.yaml
index e2f706f9..1f01ef55 100644
--- a/.github/workflows/release-sandbox.yaml
+++ b/.github/workflows/release-sandbox.yaml
@@ -39,7 +39,7 @@ jobs:
           cache: false
         id: go
       - name: Install GoReleaser
-        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
+        uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
         with:
           install-only: true
       - name: Show GoReleaser version
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 259b05f0..aa294a5d 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -41,7 +41,7 @@ jobs:
           cache: false
         id: go
       - name: Install GoReleaser
-        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
+        uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
         with:
           install-only: true
       - name: Show GoReleaser version
diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml
index a35b633b..2bb82c3f 100644
--- a/.github/workflows/zizmor.yaml
+++ b/.github/workflows/zizmor.yaml
@@ -16,7 +16,7 @@ jobs:
         with:
           persist-credentials: false
       - name: "Run zizmor \U0001F308"
-        uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
+        uses: zizmorcore/zizmor-action@85b2b9fb8e3325e7a23d7d0a9d7ba5ae0f999e3e # v0.7.1
         with:
           # intentionally not scanning the entire repository,
           inputs: ./.github/