diff --git a/.github/workflows/base-installer-cd.yml b/.github/workflows/base-installer-cd.yml
index 99f88e46bd..b0a451c928 100644
--- a/.github/workflows/base-installer-cd.yml
+++ b/.github/workflows/base-installer-cd.yml
@@ -284,7 +284,7 @@ jobs:
 
       - name: Tag, Create Release, and Upload artifacts
         if: ${{ inputs.make_release == 'true' }}
-        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228
         with:
             target_commitish: ${{ github.event.inputs.fw_ref || github.ref }}
             tag_name: build-${{ env.FW_BUILD_NUMBER }}
diff --git a/.github/workflows/link-check.yml b/.github/workflows/link-check.yml
index 24fe0db73f..eb06ac8164 100644
--- a/.github/workflows/link-check.yml
+++ b/.github/workflows/link-check.yml
@@ -11,7 +11,7 @@ jobs:
             - name: Checkout
               uses: actions/checkout@v7
             - name: Link check with lychee (non-blocking)
-              uses: lycheeverse/lychee-action@v2.8.0
+              uses: lycheeverse/lychee-action@v2.9.0
               with:
                   # Limit concurrency and accept 429 (rate-limited) as non-fatal
                   args: >-