diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 9a781ef7..0b4ef4e1 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -26,7 +26,7 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
+        uses: zizmorcore/zizmor-action@6599ee8b7a49aef6a770f63d261d214911a7ce02 # v0.6.0
 
   analyze:
     if: github.event_name == 'push' || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.repository)
@@ -261,7 +261,7 @@ jobs:
           cp sqlite-compiled/sqlite3mc.wasm sqlite3_web/extra/js-package/assets/
 
       - name: Setup node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: latest
           package-manager-cache: false
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1b8f8fee..1c90db4b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -152,7 +152,7 @@ jobs:
         cp sqlite-compiled/sqlite3mc.wasm sqlite3_web/extra/js-package/assets/
 
     - name: Setup node
-      uses: actions/setup-node@v6
+      uses: actions/setup-node@v7
       with:
         node-version: latest
         package-manager-cache: false