diff --git a/.github/workflows/crowdin_wf.yml b/.github/workflows/crowdin_wf.yml
index 495c75a343..63ea116242 100644
--- a/.github/workflows/crowdin_wf.yml
+++ b/.github/workflows/crowdin_wf.yml
@@ -36,7 +36,7 @@ jobs:
       # This prevents all the forks from attempting to run the interface...
       if: env.CROWDIN_API_TOKEN != null
       # You need to pin to a specific version for some reason...
-      uses: crowdin/github-action@c7af9bc98b01694653031fef2a0dc6c7888ce9bc #2.17.0
+      uses: crowdin/github-action@e4a6c1338b4063c77d46a81875265f9e8bd76f95 #3.0.0
       with:
         # Push sources (the english files) to CrowdIn; do not push translations (non-english) in either direction
         upload_sources: true
diff --git a/.github/workflows/crowdin_wf_next.yml b/.github/workflows/crowdin_wf_next.yml
index ed9cc4ed8f..be71c668c1 100644
--- a/.github/workflows/crowdin_wf_next.yml
+++ b/.github/workflows/crowdin_wf_next.yml
@@ -39,7 +39,7 @@ jobs:
     - name: crowdin-action
       # This prevents all the forks from attempting to run the interface...
       if: env.CROWDIN_API_TOKEN != null
-      uses: crowdin/github-action@c7af9bc98b01694653031fef2a0dc6c7888ce9bc #2.17.0
+      uses: crowdin/github-action@e4a6c1338b4063c77d46a81875265f9e8bd76f95 #3.0.0
       with:
         # Push sources (the english files) to CrowdIn; do not push translations (non-english) in either direction
         upload_sources: true
diff --git a/.github/workflows/labeler_action.yml b/.github/workflows/labeler_action.yml
index 7fff8f3e6f..aea00f1ec7 100644
--- a/.github/workflows/labeler_action.yml
+++ b/.github/workflows/labeler_action.yml
@@ -13,4 +13,4 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #7.0.1
 
       - name: Add labels
-        uses: actions/labeler@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d #v6
+        uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 #v7.0.0
diff --git a/.github/workflows/phpunit.yml b/.github/workflows/phpunit.yml
index 82581e5a9b..685c811c46 100644
--- a/.github/workflows/phpunit.yml
+++ b/.github/workflows/phpunit.yml
@@ -17,10 +17,10 @@ jobs:
         php: [ 8.4, 8.5 ]
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #4.2.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #7.0.1
 
       - name: Setup PHP ${{ matrix.php }}
-        uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 #2.32.0
+        uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 #2.37.2
         with:
           php-version: ${{ matrix.php }}
           extensions: fileinfo, mbstring
@@ -28,7 +28,7 @@ jobs:
 
       - name: Cache Composer packages
         id: composer-cache
-        uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf #4.2.2
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #6.1.0
         with:
           path: vendor
           key: ${{ runner.os }}-php${{ matrix.php }}-${{ hashFiles('**/composer.lock') }}