diff --git a/.github/workflows/common.release.yaml b/.github/workflows/common.release.yaml
index 5a825795..fba41956 100644
--- a/.github/workflows/common.release.yaml
+++ b/.github/workflows/common.release.yaml
@@ -28,7 +28,7 @@ jobs:
         git config user.email "bot@truecharts.org"
 
     - name: Install Helm
-      uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # tag=v3
+      uses: azure/setup-helm@29960d0f5f19214b88e1d9ba750a9914ab0f1a2f # v4
       with:
         version: v3.14.1
 
diff --git a/.github/workflows/common_library_tests.yaml b/.github/workflows/common_library_tests.yaml
index 2e59219a..545c4bef 100644
--- a/.github/workflows/common_library_tests.yaml
+++ b/.github/workflows/common_library_tests.yaml
@@ -32,7 +32,7 @@ jobs:
           fetch-depth: 1
 
       - name: Install Helm
-        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # tag=v3
+        uses: azure/setup-helm@29960d0f5f19214b88e1d9ba750a9914ab0f1a2f # v4
         with:
           version: ${{ matrix.helm-version }}
 
@@ -70,7 +70,7 @@ jobs:
           fetch-depth: 1
 
       - name: Install Helm
-        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3
+        uses: azure/setup-helm@29960d0f5f19214b88e1d9ba750a9914ab0f1a2f # v4
         with:
           version: ${{ matrix.helm-version }}
 
@@ -144,7 +144,7 @@ jobs:
           fetch-depth: 1
 
       - name: Install Helm
-        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3
+        uses: azure/setup-helm@29960d0f5f19214b88e1d9ba750a9914ab0f1a2f # v4
         with:
           version: ${{ matrix.helm-version }}
 
diff --git a/.github/workflows/pre-commit-check.yaml b/.github/workflows/pre-commit-check.yaml
index 0c05e0d4..2548087c 100644
--- a/.github/workflows/pre-commit-check.yaml
+++ b/.github/workflows/pre-commit-check.yaml
@@ -18,7 +18,7 @@ jobs:
       with:
         fetch-depth: 0
 
-    - uses: dorny/paths-filter@v2
+    - uses: dorny/paths-filter@ebc4d7e9ebcb0b1eb21480bb8f43113e996ac77a # v3
       id: filter
       with:
         token: ${{ secrets.BOT_TOKEN }}
diff --git a/.github/workflows/renovate-bump.yaml b/.github/workflows/renovate-bump.yaml
index 48be71a5..aee45dfc 100644
--- a/.github/workflows/renovate-bump.yaml
+++ b/.github/workflows/renovate-bump.yaml
@@ -23,7 +23,7 @@ jobs:
           fetch-depth: 0
           ref: main
           path: main
-      - uses: dorny/paths-filter@v2
+      - uses: dorny/paths-filter@ebc4d7e9ebcb0b1eb21480bb8f43113e996ac77a # v3
         id: filter
         with:
           list-files: json