diff --git a/.github/workflows/validation.yml b/.github/workflows/validation.yml
index c454320..c036716 100644
--- a/.github/workflows/validation.yml
+++ b/.github/workflows/validation.yml
@@ -21,16 +21,16 @@ jobs:
     steps:
       # We need to checkout with fetch-depth 0 or 2 for push events;
       # see https://github.com/tj-actions/changed-files?tab=readme-ov-file#usage-
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         if: github.event_name == 'push'
         with:
           fetch-depth: 0
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         if: github.event_name != 'push'
 
       - name: Get changed files
         id: changed-tei-files
-        uses: tj-actions/changed-files@e0021407031f5be11a464abee9a0776171c79891 #v47.0.1
+        uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 #v47.0.6
         if: github.event_name == 'push' || github.event_name == 'pull_request'
         with:
           files: |
@@ -42,14 +42,14 @@ jobs:
         run: echo 'files=tei/*.xml' >> $GITHUB_OUTPUT
 
       - name: Validate against TEI-All schema
-        uses: dracor-org/dracor-validate-action@5430d01df4e6dd52bb99d0bf9d94f09ad5a05ed1 # v2.1.0
+        uses: dracor-org/dracor-validate-action@4d668e6429efcbe8d8a89cb60aaf8de9f0ac0ef8 # v2.4.0
         with:
           files: |
             ${{ steps.changed-tei-files.outputs.all_changed_files }}
             ${{ steps.all-tei-files.outputs.files }}
 
       - name: Validate against DraCor schema
-        uses: dracor-org/dracor-validate-action@5430d01df4e6dd52bb99d0bf9d94f09ad5a05ed1 # v2.1.0
+        uses: dracor-org/dracor-validate-action@4d668e6429efcbe8d8a89cb60aaf8de9f0ac0ef8 # v2.4.0
         with:
           files: |
             ${{ steps.changed-tei-files.outputs.all_changed_files }}