diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 41de4f1ae6b..39ab59113f8 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -23,10 +23,10 @@ jobs:
           persist-credentials: false
 
       - name: Run pre-commit hooks
-        uses: j178/prek-action@5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16 # v2.0.6
+        uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0
 
       - name: Check spelling
-        uses: j178/prek-action@5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16 #v2.0.6
+        uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece #v3.0.0
         continue-on-error: true
         with:
           extra_args: --all-files --hook-stage manual codespell
diff --git a/.github/workflows/render.yml b/.github/workflows/render.yml
index 0adde3541a1..ae63787aa2a 100644
--- a/.github/workflows/render.yml
+++ b/.github/workflows/render.yml
@@ -52,7 +52,7 @@ jobs:
       - name: Deploy to GitHub pages
         # This allows CI to build branches for testing
         if: (github.ref == 'refs/heads/main') && (matrix.python-version == '3.x')
-        uses: JamesIves/github-pages-deploy-action@d92aa235d04922e8f08b40ce78cc5442fcfbfa2f #v4.8.0
+        uses: JamesIves/github-pages-deploy-action@fa24774553152dd7873cd16ebd8d959b010c5445 #v4.9.0
         with:
           folder: build # Synchronise with Makefile -> BUILDDIR
           single-commit: true # Delete existing files