diff --git a/.github/workflows/trunk.upgrades.yaml b/.github/workflows/trunk.upgrades.yaml
index 50547e0..cae94e9 100644
--- a/.github/workflows/trunk.upgrades.yaml
+++ b/.github/workflows/trunk.upgrades.yaml
@@ -15,10 +15,10 @@ jobs:
     steps:
       - name: Checkout
         # yamllint disable-line rule:line-length
-        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Generate GitHub token
         # https://github.com/actions/create-github-app-token
-        uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2.2.2
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         id: generate-token
         with:
           app-id: ${{ secrets.APP_ID }}
@@ -28,7 +28,7 @@ jobs:
           permission-issues: write
       - name: Trunk Upgrade
         # yamllint disable-line rule:line-length
-        uses: trunk-io/trunk-action/upgrade@04ba50e7658c81db7356da96657e6e77f220bfa3 # v1
+        uses: trunk-io/trunk-action/upgrade@e1234e67a86010d61ddac8d8ebf4b783e2ffd2fa # v2.0.0
         with:
           github-token: ${{ steps.generate-token.outputs.token }}
           prefix: "chore: "