diff --git a/.github/workflows/pr-agent.yml b/.github/workflows/pr-agent.yml
index 77f2006..650382d 100644
--- a/.github/workflows/pr-agent.yml
+++ b/.github/workflows/pr-agent.yml
@@ -15,7 +15,7 @@ jobs:
         if: ${{ github.event.sender.type != 'Bot' }}
         steps:
             - name: PR Agent action step
-              uses: the-pr-agent/pr-agent@4ebd5c5333c6ef21509e7304d27969eb825e6f22 # v0.43.0
+              uses: the-pr-agent/pr-agent@ab6ec54bfeb37933ddb74259338752e9272016c6 # v0.44.0
               env:
                   OPENAI_KEY: ${{ secrets.OPENAI_KEY }}
                   OPENAI_API_BASE: ${{ secrets.OPENAI_API_BASE }}
diff --git a/.github/workflows/sync-files.yml b/.github/workflows/sync-files.yml
index 2f37357..3c61c35 100644
--- a/.github/workflows/sync-files.yml
+++ b/.github/workflows/sync-files.yml
@@ -14,7 +14,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
-      - uses: Songmu/tagpr@d1b8138b7a31075141b6cd64103de9485ced7ac9 # v1
+      - uses: Songmu/tagpr@242e22916eb775d6e359959fe3ba5c497de4a01a # v1
         id: tagpr
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -29,7 +29,7 @@ jobs:
         if: ${{ steps.tagpr.outputs.tag != ''}}
 
       - name: Sync files
-        uses: wadackel/files-sync-action@2c7a879da054365c87c0bb8fa08de559f385ed43 # v3
+        uses: wadackel/files-sync-action@80fcb2d79aa9b44b23b9e2a742d3073a34c0c7bc # v3
         with:
           github_token: ${{ steps.app-token.outputs.token }}
         if: ${{ steps.tagpr.outputs.tag != ''}}