diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index da5d552..43e27aa 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -56,7 +56,7 @@ jobs:
       - name: Install cargo-audit
         # Prebuilt, checksum-verified binary — the previous `cargo install`
         # compiled it from source on every run (~3 min).
-        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2.81.10
+        uses: taiki-e/install-action@9e1e5806d4a4822de933115878265be9aaa786d9 # v2.82.2
         with:
           tool: cargo-audit@0.22.2
       - name: Audit the workspace lockfile
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 78f406c..4fddfb6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -75,7 +75,7 @@ jobs:
         # Prebuilt binary, checksum-verified internally against install-action's
         # signed manifests — replaces a hand-maintained curl + sha256 pin.
         # (actionlint above keeps the curl form: install-action doesn't carry it.)
-        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2.81.10
+        uses: taiki-e/install-action@9e1e5806d4a4822de933115878265be9aaa786d9 # v2.82.2
         with:
           tool: taplo@0.10.0
       - name: taplo
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index 780f871..bfbeb64 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -45,7 +45,7 @@ jobs:
       - name: Install cargo-fuzz
         # Prebuilt, checksum-verified binary — the previous `cargo install`
         # compiled it from source on every run.
-        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2.81.10
+        uses: taiki-e/install-action@9e1e5806d4a4822de933115878265be9aaa786d9 # v2.82.2
         with:
           tool: cargo-fuzz@0.13.2
       - name: Restore evolved corpus
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f2e0164..bc9109b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -170,7 +170,7 @@ jobs:
         with:
           path: dist
           merge-multiple: true
-      - uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3
+      - uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3
         with:
           generate_release_notes: true
           files: dist/*