diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index da13bb017..9755223d0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -158,7 +158,7 @@ jobs:
       # this repository cannot spell correctly would otherwise surface for the
       # first time during a release.
       - name: Check the release build definition
-        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
+        uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
         with:
           version: v2.13.0
           args: check
@@ -278,7 +278,7 @@ jobs:
         run: go test -count=1 ./agent/... ./cmd/aiscan/... ./pkg/web/...
 
       - name: Set up Node.js for bootstrap tests
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: 22
 
diff --git a/.github/workflows/release-build.yml b/.github/workflows/release-build.yml
index 0390d9148..ae62a968e 100644
--- a/.github/workflows/release-build.yml
+++ b/.github/workflows/release-build.yml
@@ -118,7 +118,7 @@ jobs:
         run: grep -Ev '^[[:space:]]*(#|$)' editions.env >> "$GITHUB_ENV"
 
       - name: Install GoReleaser
-        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
+        uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
         with:
           install-only: true
           version: v2.13.0