diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 76da960c..ae43a077 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -27,15 +27,15 @@ jobs:
           echo "VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
           echo "${GITHUB_REF}"
       - name: Checkout
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+        uses: actions/checkout@v6
       - name: Setup Node.js environment
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        uses: actions/setup-node@v6
         with:
           node-version: 24
       - name: Install Dependencies
         run: npm install --global yarn@1.22.22
       - name: Setup Go environment
-        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff
+        uses: actions/setup-go@v6
         with:
           go-version: '1.26.6'
           cache-dependency-path: backend/go.sum
@@ -70,7 +70,7 @@ jobs:
         run: |
           SMAIL_VERSION="${{ env.VERSION }}" GIT_HASH="$(git show -s --format=%H)" node deploy/package.mjs ${{ matrix.goos }}_${{ matrix.goarch }}
       - name: Upload files to Artifacts
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@v6
         with:
           name: ${{ env.PACKAGENAME }}
           path: out/release/${{ env.ARCHIVENAME }}
@@ -88,14 +88,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+        uses: actions/checkout@v6
       - name: Setup Go environment
-        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff
+        uses: actions/setup-go@v6
         with:
           go-version: '1.26.6'
           cache-dependency-path: backend/go.sum
       - name: Setup Node.js for test runner
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        uses: actions/setup-node@v6
         with:
           node-version: 24
       - name: Prepare frontend and Go embedded assets
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 3456e91b..7c33efc2 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+        uses: actions/checkout@v6
       - name: Reject committed cloud credentials and private keys
         run: python3 test/tools/check_tracked_secrets.py
       - name: Verify isolated acceptance and secret scanner regressions
@@ -22,12 +22,12 @@ jobs:
           python3 -m unittest discover -s test/deployment -p 'test_runtime_*.py'
           python3 -m unittest discover -s test/deployment -p 'test_tracked_secrets.py'
       - name: Setup Go environment
-        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff
+        uses: actions/setup-go@v6
         with:
           go-version: '1.26.6'
           cache-dependency-path: backend/go.sum
       - name: Setup Node.js for test runner
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        uses: actions/setup-node@v6
         with:
           node-version: 24
       - name: Prepare frontend and Go embedded assets