diff --git a/.github/workflows/claude-mention.yml b/.github/workflows/claude-mention.yml
index f58e9bf..593430d 100644
--- a/.github/workflows/claude-mention.yml
+++ b/.github/workflows/claude-mention.yml
@@ -50,7 +50,7 @@ jobs:
           echo "saved $(wc -c < /tmp/claude-mention-comment.txt) bytes"
 
       - name: Run Claude reply
-        uses: anthropics/claude-code-action@b76a0776ae74036e77cd11018083743453d7ad35 # v1.0.112: pin pre-regression, vedi anthropics/claude-code-action#1254
+        uses: anthropics/claude-code-action@be7b93b1907a4abad570368f3c74b6fe3807510b # v1.0.112: pin pre-regression, vedi anthropics/claude-code-action#1254
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           claude_args: |
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index ddf1921..88dda22 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -33,10 +33,10 @@ jobs:
       - uses: actions/checkout@v7
         with:
           persist-credentials: false
-      - uses: github/codeql-action/init@v4.37.1
+      - uses: github/codeql-action/init@v4.37.3
         with:
           languages: ${{ matrix.language }}
           queries: security-and-quality
-      - uses: github/codeql-action/analyze@v4.37.1
+      - uses: github/codeql-action/analyze@v4.37.3
         with:
           category: "/language:${{ matrix.language }}"