diff --git a/.github/workflows/despliega-cloud-run.yaml b/.github/workflows/despliega-cloud-run.yaml
index d507b3d..a6c33fa 100644
--- a/.github/workflows/despliega-cloud-run.yaml
+++ b/.github/workflows/despliega-cloud-run.yaml
@@ -62,13 +62,13 @@ jobs:
         # Workload Identity Federation: GitHub Actions actúa como proveedor OIDC.
         # No se almacenan llaves JSON de service account en ningún secreto.
         # El binding en iam.tf restringe el acceso al repositorio y entorno exactos.
-        uses: google-github-actions/auth@v2
+        uses: google-github-actions/auth@v3
         with:
           workload_identity_provider: ${{ vars.GCP_WORKLOAD_IDENTITY_PROVIDER }}
           service_account: ${{ vars.GCP_SERVICE_ACCOUNT }}
 
       - name: Configurar gcloud CLI
-        uses: google-github-actions/setup-gcloud@v2
+        uses: google-github-actions/setup-gcloud@v3
 
       - name: Construir referencia de imagen
         # Usa la imagen publicada en GHCR por envia-a-packages.yml con el mismo git tag.
diff --git a/.github/workflows/envia-a-packages.yml b/.github/workflows/envia-a-packages.yml
index 79ac105..6de5b8e 100644
--- a/.github/workflows/envia-a-packages.yml
+++ b/.github/workflows/envia-a-packages.yml
@@ -202,7 +202,7 @@ jobs:
       - name: Autenticar en GCP via OIDC — solo prod
         if: needs.resolve-env.outputs.target == 'prod'
         id: gcp_auth
-        uses: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed
+        uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
         with:
           workload_identity_provider: ${{ vars.GCP_WORKLOAD_IDENTITY_PROVIDER }}
           service_account: ${{ vars.GCP_SERVICE_ACCOUNT }}
@@ -229,7 +229,7 @@ jobs:
 
       - name: Desplegar en Cloud Run — solo prod
         if: needs.resolve-env.outputs.target == 'prod'
-        uses: google-github-actions/deploy-cloudrun@v2
+        uses: google-github-actions/deploy-cloudrun@v3
         with:
           service: ${{ vars.GCP_CLOUD_RUN_SERVICE }}
           region: ${{ vars.GCP_REGION }}