diff --git a/.github/actions/setup/action.yml b/.github/actions/setup/action.yml
index 0fe536b6..8699c2d4 100644
--- a/.github/actions/setup/action.yml
+++ b/.github/actions/setup/action.yml
@@ -3,7 +3,7 @@ description: "Install Node & NPM dependencies"
 runs:
   using: composite
   steps:
-    - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4
+    - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
       with:
         node-version-file: ".nvmrc"
         cache: npm
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 46e77c0b..4819deb6 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -15,7 +15,7 @@ jobs:
     environment: Release
     name: CD
     steps:
-      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
       - uses: ./.github/actions/setup
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 763aeb0c..4dab3458 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     name: CI
     steps:
-      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/setup
       - uses: ./.github/actions/lint
       - name: Unit tests
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index e94aa400..d450b9e9 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -27,7 +27,7 @@ jobs:
         language: ["javascript"]
 
     steps:
-      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: CodeQL
         uses: ./.github/actions/codeql
         with:
diff --git a/package-lock.json b/package-lock.json
index 2848c8ab..298800ac 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -23,7 +23,7 @@
         "@types/conventional-commits-parser": "5.0.0",
         "@types/debug": "4.1.12",
         "@types/git-raw-commits": "2.0.4",
-        "@types/jest": "29.5.13",
+        "@types/jest": "29.5.14",
         "@types/semver": "7.5.8",
         "@typescript-eslint/eslint-plugin": "7.18.0",
         "@typescript-eslint/parser": "7.18.0",
@@ -2060,9 +2060,9 @@
       }
     },
     "node_modules/@types/jest": {
-      "version": "29.5.13",
-      "resolved": "https://registry.npmjs.org/@types/jest/-/jest-29.5.13.tgz",
-      "integrity": "sha512-wd+MVEZCHt23V0/L642O5APvspWply/rGY5BcW4SUETo2UzPU3Z26qr8jC2qxpimI2jjx9h7+2cj2FwIr01bXg==",
+      "version": "29.5.14",
+      "resolved": "https://registry.npmjs.org/@types/jest/-/jest-29.5.14.tgz",
+      "integrity": "sha512-ZN+4sdnLUbo8EVvVc2ao0GFW6oVrQRPn4K2lglySj7APvSrgzxHiNNK99us4WDMi57xxA2yggblIAMNhXOotLQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
diff --git a/package.json b/package.json
index 63e47d9f..84892449 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,7 @@
     "@types/conventional-commits-parser": "5.0.0",
     "@types/debug": "4.1.12",
     "@types/git-raw-commits": "2.0.4",
-    "@types/jest": "29.5.13",
+    "@types/jest": "29.5.14",
     "@types/semver": "7.5.8",
     "@typescript-eslint/eslint-plugin": "7.18.0",
     "@typescript-eslint/parser": "7.18.0",