diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index b7c0fd9..deb49e4 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -31,7 +31,7 @@ jobs:
       - name: Test
         run: vendor/bin/phpunit
       - name: Code Coverage
-        uses: qltysh/qlty-action/coverage@08a0a862c159eae9b9003081da6663d96efef637 # v2.3.0
+        uses: qltysh/qlty-action/coverage@c9b09987143d1e4ac955f4803c7bea742102feb5 # v2.4.0
         with:
           oidc: true
           files: build/logs/clover.xml
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 9b87a54..807511a 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -7,7 +7,7 @@ on:
 
 jobs:
   composer:
-    uses: kawax/composer-workflow/.github/workflows/update.yml@57b73efb159a6efbabf16d2ef16feb218b1769d7 # v1
+    uses: kawax/composer-workflow/.github/workflows/update.yml@888e53044760bcd5a8dfcb8501ae7d48f58ab10c # v1
     secrets:
       token: ${{ secrets.GITHUB_TOKEN }}
     with: