diff --git a/.github/workflows/it-test.yml b/.github/workflows/it-test.yml
index f6a6cdd..b7c52da 100644
--- a/.github/workflows/it-test.yml
+++ b/.github/workflows/it-test.yml
@@ -9,7 +9,7 @@ jobs:
     name: "IT Test - default inputs values should work fine on this repo"
     runs-on: github-ubuntu-latest-s
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - name: Given the gh-action is used with default values
         id: test-data
         uses: ./
@@ -24,7 +24,7 @@ jobs:
     name: "IT Test - custom extra-args should be honored"
     runs-on: github-ubuntu-latest-s
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - name: Given the gh-action is used with extra-args=--help
         id: test-data
         uses: ./
@@ -41,7 +41,7 @@ jobs:
     name: "IT Test - output status should be 1 given pre-commit detected some issue"
     runs-on: github-ubuntu-latest-s
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - name: Given a pre-commit-config not correctly respected
         id: test-data
         uses: ./
@@ -60,7 +60,7 @@ jobs:
     name: "IT Test - output status should be 0 given pre-commit detected no issue"
     runs-on: github-ubuntu-latest-s
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - name: Given a pre-commit-config correctly respected
         id: test-data
         uses: ./
@@ -79,7 +79,7 @@ jobs:
     name: "IT Test - output logs should contain failures given pre-commit detected some issue"
     runs-on: github-ubuntu-latest-s
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - name: Given a pre-commit-config not correctly respected
         id: test-data
         uses: ./
@@ -98,7 +98,7 @@ jobs:
     name: "IT Test - output logs should contain no failure given pre-commit detected no issue"
     runs-on: github-ubuntu-latest-s
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - name: Given a pre-commit-config correctly respected
         id: test-data
         uses: ./
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index befb19b..2e34aad 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -6,7 +6,7 @@ jobs:
     name: "pre-commit"
     runs-on: github-ubuntu-latest-s
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: ./
         with:
           extra-args: >
diff --git a/action.yml b/action.yml
index fbf6b6c..785fa2d 100644
--- a/action.yml
+++ b/action.yml
@@ -32,14 +32,14 @@ runs:
         echo "CONFIG_PATH=$CONFIG_PATH" >> "$GITHUB_ENV"
         echo "EXTRA_ARGS=$EXTRA_ARGS"   >> "$GITHUB_ENV"
     - name: Checkout
-      uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
     - name: Fetch origin
       run: git fetch origin # avoid unknown revision or path not in the working tree when
       # using --from-ref --to-ref feature of pre-commit
       shell: bash
     - id: setup_python
       name: Setup python
-      uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
+      uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
       with:
         python-version: '3.14'
     - name: Setup pre-commit