diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index d68376732..11a191fb3 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -39,7 +39,7 @@ jobs:
           echo "Enable Renovate dry run"
           echo "RENOVATE_DRY_RUN=full" >>"${GITHUB_ENV}"
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v40.3.4
+        uses: renovatebot/github-action@v41.0.2
         env:
           LOG_LEVEL: "debug"
         with:
diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml
index 5dd1747e8..62543ebc5 100644
--- a/.github/workflows/scorecard.yaml
+++ b/.github/workflows/scorecard.yaml
@@ -49,6 +49,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@v3.27.0
+        uses: github/codeql-action/upload-sarif@v3.27.1
         with:
           sarif_file: results.sarif