diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 10fd0fd91..a3207efeb 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -149,7 +149,7 @@ jobs:
 
       - name: Send coverage report to Codecov
         if: ${{ success() && matrix.coverage == true && github.event.repository.fork == false }}
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           token: "${{ secrets.CODECOV_TOKEN }}"
           files: ./tests/coverage/clover.xml
diff --git a/.github/workflows/update-website.yml b/.github/workflows/update-website.yml
index ab3690fa8..079f59e18 100644
--- a/.github/workflows/update-website.yml
+++ b/.github/workflows/update-website.yml
@@ -202,7 +202,7 @@ jobs:
 
       # Test that the site builds correctly.
       - name: Set up Ruby
-        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
+        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1.327.0
         with:
           # Use the version as per https://pages.github.com/versions/.
           ruby-version: 3.3.4