diff --git a/.github/actions/prepare-release/action.yaml b/.github/actions/prepare-release/action.yaml
index fab9b4db..e0460bde 100644
--- a/.github/actions/prepare-release/action.yaml
+++ b/.github/actions/prepare-release/action.yaml
@@ -3,7 +3,7 @@ name: Prepare-Release
 runs:
   using: composite
   steps:
-    - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417  # v6.3.0
+    - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v6.4.0
       with:
         go-version: '1.26'
     - name: prepare-release
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 520f5bb4..fa8a4517 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -51,7 +51,7 @@ jobs:
         with:
           commit-objects-artefact: ${{ needs.prepare.outputs.version-commit-artefact }}
           after-import: rebase
-      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417  # v6.3.0
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v6.4.0
         with:
           go-version: '1.26'
       - name: build-diki
@@ -138,7 +138,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417  # v6.3.0
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v6.4.0
         with:
           go-version: '1.26'
       - uses: gardener/cc-utils/.github/actions/trusted-checkout@v1
diff --git a/.github/workflows/publish-to-package-repositories.yaml b/.github/workflows/publish-to-package-repositories.yaml
index 247a8423..b4dcc686 100644
--- a/.github/workflows/publish-to-package-repositories.yaml
+++ b/.github/workflows/publish-to-package-repositories.yaml
@@ -39,7 +39,7 @@ jobs:
       - name: Get token for gardener-github-pkg-mngr app
         if: ${{ inputs.dry_run == false }}
         id: gardener-github-workflows
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859   # v3.0.0
+        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3   # v3.1.1
         with:
           app-id:      ${{ secrets.GARDENER_GITHUB_WORKFLOW_PKG_MNGR_APP_ID }}
           private-key: ${{ secrets.GARDENER_GITHUB_WORKFLOW_PKG_MNGR_APP_PRIVATE_KEY }}