diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 51f073c4..e88d639e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -7,9 +7,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout project
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
 
-      - uses: actions/setup-node@e33196f7422957bea03ed53f6fbb155025ffc7b8 # v3.7.0
+      - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1
         with:
           node-version: '16'
 
@@ -25,21 +25,21 @@ jobs:
 
       - name: Upload artifact with `PR_NUMBER`
         if: ${{ github.event.pull_request.user.login != 'dependabot[bot]' }}
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         with:
           name: PR_NUMBER
           path: PR_NUMBER
 
       - name: Upload artifact with `dist` folder
         if: ${{ github.event.pull_request.user.login != 'dependabot[bot]' }}
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         with:
           name: dist
           path: dist/
 
       - name: Upload artifact with `covertura.xml`
         if: ${{ github.event.pull_request.user.login != 'dependabot[bot]' }}
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         with:
           name: cobertura
           path: coverage/cobertura-coverage.xml
diff --git a/.github/workflows/code_coverage_comment.yml b/.github/workflows/code_coverage_comment.yml
index 9fb22ede..42147f23 100644
--- a/.github/workflows/code_coverage_comment.yml
+++ b/.github/workflows/code_coverage_comment.yml
@@ -12,17 +12,17 @@ jobs:
     if: ${{ github.event.pull_request.user.login != 'dependabot[bot]' && github.event.workflow_run.conclusion == 'success' }}
     steps:
       - name: Checkout project
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
 
       - name: Download cobertura.xml file
-        uses: dawidd6/action-download-artifact@246dbf436b23d7c49e21a7ab8204ca9ecd1fe615 # v2.27.0
+        uses: dawidd6/action-download-artifact@268677152d06ba59fcec7a7f0b5d961b6ccd7e1e # v2.28.0
         with:
           run_id: ${{github.event.workflow_run.id }}
           name: cobertura
           path: .
 
       - name: Download PR_NUMBER
-        uses: dawidd6/action-download-artifact@246dbf436b23d7c49e21a7ab8204ca9ecd1fe615 # v2.27.0
+        uses: dawidd6/action-download-artifact@268677152d06ba59fcec7a7f0b5d961b6ccd7e1e # v2.28.0
         with:
           run_id: ${{github.event.workflow_run.id }}
           name: PR_NUMBER
@@ -44,7 +44,7 @@ jobs:
           thresholds: '60 80'
 
       - name: Add Coverage PR Comment
-        uses: marocchino/sticky-pull-request-comment@f6a2580ed520ae15da6076e7410b088d1c5dddd9 # v2.7.0
+        uses: marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd # v2.8.0
         with:
           recreate: true
           header: coverage
diff --git a/.github/workflows/release_auto.yml b/.github/workflows/release_auto.yml
index ce3d52f4..2f4e3861 100644
--- a/.github/workflows/release_auto.yml
+++ b/.github/workflows/release_auto.yml
@@ -19,12 +19,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout project
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
         with:
           fetch-depth: 0
           ref: master
 
-      - uses: actions/setup-node@e33196f7422957bea03ed53f6fbb155025ffc7b8 # v3.7.0
+      - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1
         with:
           node-version: '16'
 
@@ -35,7 +35,7 @@ jobs:
         run: npm run build
 
       - name: Release new version
-        uses: int128/release-typescript-action@035c6899d22569f5440029e3e744b951c01659e5 # v1.22.0
+        uses: int128/release-typescript-action@9e19901f9e557435e53c92f2e63e66dae854dacd # v1.24.0
         with:
           major-version: 2
 
@@ -45,7 +45,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout project
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
         with:
           fetch-depth: 0
           ref: master
diff --git a/.github/workflows/release_pr_snapshot.yml b/.github/workflows/release_pr_snapshot.yml
index d93b9ba7..eea4b932 100644
--- a/.github/workflows/release_pr_snapshot.yml
+++ b/.github/workflows/release_pr_snapshot.yml
@@ -12,7 +12,7 @@ jobs:
     if: ${{ github.event.pull_request.user.login != 'dependabot[bot]' && github.event.workflow_run.conclusion == 'success' }}
     steps:
       - name: Download PR_NUMBER
-        uses: dawidd6/action-download-artifact@246dbf436b23d7c49e21a7ab8204ca9ecd1fe615 # v2.27.0
+        uses: dawidd6/action-download-artifact@268677152d06ba59fcec7a7f0b5d961b6ccd7e1e # v2.28.0
         with:
           run_id: ${{github.event.workflow_run.id }}
           name: PR_NUMBER
@@ -25,7 +25,7 @@ jobs:
           echo "PR_NUMBER=$pr_number" >> $GITHUB_OUTPUT
 
       - name: Checkout project
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
 
       - name: Checkout PR
         env:
@@ -33,7 +33,7 @@ jobs:
         run: gh pr checkout ${{ steps.extract-pr-number.outputs.PR_NUMBER }}
 
       - name: Download dist folder
-        uses: dawidd6/action-download-artifact@246dbf436b23d7c49e21a7ab8204ca9ecd1fe615 # v2.27.0
+        uses: dawidd6/action-download-artifact@268677152d06ba59fcec7a7f0b5d961b6ccd7e1e # v2.28.0
         with:
           run_id: ${{github.event.workflow_run.id }}
           name: dist
@@ -50,7 +50,7 @@ jobs:
           branch: snapshots/${{ steps.extract-pr-number.outputs.PR_NUMBER }}
 
       - name: Create Comment
-        uses: marocchino/sticky-pull-request-comment@f6a2580ed520ae15da6076e7410b088d1c5dddd9 # v2.7.0
+        uses: marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd # v2.8.0
         with:
           recreate: true
           header: snapshot
diff --git a/.github/workflows/remove_snapshot_branch.yml b/.github/workflows/remove_snapshot_branch.yml
index 8ad0f341..6310fa8e 100644
--- a/.github/workflows/remove_snapshot_branch.yml
+++ b/.github/workflows/remove_snapshot_branch.yml
@@ -11,7 +11,7 @@ jobs:
     if: github.event.sender.login != 'dependabot[bot]'
     steps:
       - name: Checkout project
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
 
       - name: Remove snapshot branch
         run: git push origin -d snapshots/${{ github.event.number }} || true