diff --git a/.github/workflows/pr-labeler.yml b/.github/workflows/pr-labeler.yml
index c2664839e3..d924c84596 100644
--- a/.github/workflows/pr-labeler.yml
+++ b/.github/workflows/pr-labeler.yml
@@ -19,6 +19,6 @@ jobs:
           permission-contents: read
           permission-pull-requests: write
 
-      - uses: actions/labeler@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d # v6.2.0
+      - uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v7.0.0
         with:
           repo-token: ${{ steps.token.outputs.token }}
diff --git a/.github/workflows/prepare-release.yml b/.github/workflows/prepare-release.yml
index 976ba9906a..48969b9155 100644
--- a/.github/workflows/prepare-release.yml
+++ b/.github/workflows/prepare-release.yml
@@ -74,7 +74,7 @@ jobs:
 
       # TODO move to mise
       - name: Install uv
-        uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
 
       - name: Bump version
         env: