diff --git a/.github/workflows/cover.yaml b/.github/workflows/cover.yaml
index d86f69f5d9..b8e67cee9e 100644
--- a/.github/workflows/cover.yaml
+++ b/.github/workflows/cover.yaml
@@ -22,7 +22,7 @@ jobs:
         go-version: '1.22'
     - run: "PATH=/usr/local/go/bin:$PATH make test-cover"
     #  Retry codecov upload. It is flaky due to a known issue https://community.codecov.com/t/upload-issues-unable-to-locate-build-via-github-actions-api/3954
-    - uses: Wandalen/wretry.action@6feedb7dedadeb826de0f45ff482b53b379a7844 # v3.5.0
+    - uses: Wandalen/wretry.action@f8754f79743ba113fedbba4499593f7d73b458eb # v3.7.0
       with:
         attempt_limit: 20
         action: codecov/codecov-action@7afa10ed9b269c561c2336fd862446844e0cbf71 # v4.2.0
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 38fe9a9d41..1013784dda 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -37,7 +37,7 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
       - name: Release
-        uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # tag=v2.0.8
+        uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # tag=v2.0.9
         with:
           draft: true
           files: out/*