diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5b97b58..8df146a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,7 +35,7 @@ jobs:
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-    - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
+    - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
       with:
         python-version: ${{ matrix.pyversion }}
         cache: 'pip'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8973440..2ac5698 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
+      - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
         with:
           python-version: '3.12'
 
diff --git a/.github/workflows/update-pinned-deps.yml b/.github/workflows/update-pinned-deps.yml
index 4723bac..d588509 100644
--- a/.github/workflows/update-pinned-deps.yml
+++ b/.github/workflows/update-pinned-deps.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
+      - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
         with:
           python-version: '3.12'
 
diff --git a/actions/create-signing-events/action.yml b/actions/create-signing-events/action.yml
index ad48df2..74b83cb 100644
--- a/actions/create-signing-events/action.yml
+++ b/actions/create-signing-events/action.yml
@@ -14,7 +14,7 @@ runs:
         token: ${{ inputs.token }}
         fetch-depth: 0
 
-    - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
+    - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
       with:
         python-version: "3.11"
 
diff --git a/actions/online-sign/action.yml b/actions/online-sign/action.yml
index 1294efe..afc9513 100644
--- a/actions/online-sign/action.yml
+++ b/actions/online-sign/action.yml
@@ -44,7 +44,7 @@ runs:
 
     - name: Authenticate to Google Cloud
       if: inputs.gcp_workload_identity_provider != ''
-      uses: google-github-actions/auth@6fc4af4b145ae7821d527454aa9bd537d1f2dc5f # v2.1.7
+      uses: google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935 # v2.1.8
       with:
         token_format: access_token
         workload_identity_provider: ${{ inputs.gcp_workload_identity_provider }}
@@ -65,7 +65,7 @@ runs:
         tenant-id: ${{ inputs.azure_tenant_id }}
         subscription-id: ${{ inputs.azure_subscription_id }}
 
-    - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
+    - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
       with:
         python-version: "3.11"
 
diff --git a/actions/signing-event/action.yml b/actions/signing-event/action.yml
index 43c05c3..850f9e7 100644
--- a/actions/signing-event/action.yml
+++ b/actions/signing-event/action.yml
@@ -29,7 +29,7 @@ runs:
         token: ${{ inputs.token }}
         fetch-depth: 0
 
-    - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
+    - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
       with:
         python-version: "3.11"
 
diff --git a/actions/test-repository/action.yml b/actions/test-repository/action.yml
index 86e8768..78d0c1d 100644
--- a/actions/test-repository/action.yml
+++ b/actions/test-repository/action.yml
@@ -47,7 +47,7 @@ runs:
         ref: "publish"
         path: "source/"
 
-    - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
+    - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
       with:
         python-version: "3.11"
 
diff --git a/actions/upload-repository/action.yml b/actions/upload-repository/action.yml
index 09b49fd..d628a4a 100644
--- a/actions/upload-repository/action.yml
+++ b/actions/upload-repository/action.yml
@@ -26,7 +26,7 @@ runs:
       with:
         ref: ${{ inputs.ref }}
 
-    - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
+    - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
       with:
         python-version: "3.11"