diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 75b9c20..0fd7328 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -19,7 +19,7 @@ jobs:
     timeout-minutes: 10
     environment: production
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           submodules: true
           fetch-depth: 0
@@ -28,7 +28,7 @@ jobs:
         with:
           hugo-version: latest
           extended: true
-      - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
+      - uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
         with:
           path: /tmp/hugo_cache
           key: ${{ runner.os }}-hugomod-${{ hashFiles('**/go.sum') }}
diff --git a/.github/workflows/trunk-call.yml b/.github/workflows/trunk-call.yml
index 169bb45..22d8dd3 100644
--- a/.github/workflows/trunk-call.yml
+++ b/.github/workflows/trunk-call.yml
@@ -13,4 +13,4 @@ on:
 jobs:
   check:
     name: "⚡"
-    uses: z-shell/.github/.github/workflows/trunk.yml@8ee041623cd5a2892887357ea9f0fb443ff3d2b4 # main
+    uses: z-shell/.github/.github/workflows/trunk.yml@58b6ff6b4f23c57e18dea9c704fb023ed95f1458 # main