diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fcca4a6..690c894 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -34,7 +34,7 @@ jobs:
             max-jobs = 2
             cores = 2
 
-      - uses: cachix/cachix-action@ad2ddac53f961de1989924296a1f236fcfbaa4fc # v15
+      - uses: cachix/cachix-action@38b082610b782e7e93e209c35fd730d399dee866 # v17
         with:
           name: nix-community
           skipPush: true
@@ -56,7 +56,7 @@ jobs:
             max-jobs = 2
             cores = 2
 
-      - uses: cachix/cachix-action@ad2ddac53f961de1989924296a1f236fcfbaa4fc # v15
+      - uses: cachix/cachix-action@38b082610b782e7e93e209c35fd730d399dee866 # v17
         with:
           name: nix-community
           skipPush: true
diff --git a/.github/workflows/ibge-sync.yml b/.github/workflows/ibge-sync.yml
index 2e1d386..a973c50 100644
--- a/.github/workflows/ibge-sync.yml
+++ b/.github/workflows/ibge-sync.yml
@@ -71,7 +71,7 @@ jobs:
 
       - name: Create pull request for municipality drift
         if: steps.drift.outputs.changed == 'true'
-        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: "chore(ibge): sync municipalities"