diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 45e202d1a..3e72c530a 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -12,7 +12,7 @@ jobs:
             contents: "read"
             pull-requests: "write"
         steps:
-            - uses: "actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9" # v5.0.0
+            - uses: "actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b" # v6.0.1
               with:
                   repo-token: "${{ secrets.GITHUB_TOKEN }}"
                   configuration-path: "labeler-config.yml"
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index ed64de983..c732d3b55 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -65,7 +65,7 @@ jobs:
             # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
             # format to the repository Actions tab.
             - name: "Upload artifact"
-              uses: "actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4" # v5.0.0
+              uses: "actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f" # v6.0.0
               with:
                   name: "SARIF file"
                   path: "results.sarif"