diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ec1dfff..1a0dc22 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -156,7 +156,7 @@ jobs:
             echo "   pnpm add -D vitest @vitest/coverage-v8"
           fi
       - name: Upload coverage
-        uses: codecov/codecov-action@v6
+        uses: codecov/codecov-action@v7
         if: needs.detect.outputs.has-vitest == 'true'
         with:
           files: ./coverage/lcov.info
@@ -221,7 +221,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - name: Trivy Dockerfile scan
-        uses: aquasecurity/trivy-action@0.35.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           scan-type: config
           scan-ref:  docker/Dockerfile.prod