diff --git a/.github/workflows/annotate.yml b/.github/workflows/annotate.yml
index bcef23325eae..e2d5caaf9df1 100644
--- a/.github/workflows/annotate.yml
+++ b/.github/workflows/annotate.yml
@@ -56,7 +56,7 @@ jobs:
           fail_if_no_tests: false
           commit: ${{github.event.workflow_run.head_sha}}
       # Process Product Test reports
-      - uses: starburstdata/action-testng-report@ce8d903c91ed324a708db57174ec34416e8a3eea # v1.0.3
+      - uses: starburstdata/action-testng-report@01dfdf31e0f8cc1d3c3f3ba727c7e7a3b438e187 # v1.0.4
         with:
           # this workflow should never fail, as it is not a quality gateway
           fail_if_empty: false
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 005328c2bf42..4d8113e4866b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -118,7 +118,7 @@ jobs:
           $MAVEN failsafe:integration-test failsafe:verify -B --strict-checksums -P ci -pl :trino-jdbc
       - name: Clean Maven Output
         run: $MAVEN clean -pl '!:trino-server,!:trino-cli'
-      - uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3
+      - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
         with:
           platforms: arm64,ppc64le
       - name: Build and Test Docker Image