diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f419ac70..9aa214b0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -162,7 +162,7 @@ jobs:
           fi
       # The SDK pinned in global.json built the committed DLLs.
       - if: steps.changes.outputs.run == 'true'
-        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
+        uses: actions/setup-dotnet@0f4a354dd5547a28c70b7853dbd95d5b67886e73 # v6.1.0
         with:
           global-json-file: global.json
       # Delete them first: a build that stops copying a DLL into the package then shows as a deleted file in the diff,
@@ -252,7 +252,7 @@ jobs:
       # The test projects target net6.0; the SDK pinned in global.json builds them,
       # the 6.0 runtime (installed via the 6.0.x SDK) runs them.
       - if: steps.changes.outputs.run == 'true'
-        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
+        uses: actions/setup-dotnet@0f4a354dd5547a28c70b7853dbd95d5b67886e73 # v6.1.0
         with:
           global-json-file: global.json
           dotnet-version: 6.0.x
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index a78f99d1..9e033646 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -65,7 +65,7 @@ jobs:
           sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
 
       - name: Review PR
-        uses: anthropics/claude-code-action@f27be6b65a4652f08a2ba3cff79114829b588967 # v1.0.252
+        uses: anthropics/claude-code-action@61a9c274fa7110a66dfafc1bbbced03833eb25fe # v1.0.269
         env: &claude-env
           # The action reads this variable and appends it to the system prompt.
           APPEND_SYSTEM_PROMPT: ${{ steps.rules.outputs.text }}
@@ -111,7 +111,7 @@ jobs:
       - *bubblewrap
 
       - name: Run Claude
-        uses: anthropics/claude-code-action@f27be6b65a4652f08a2ba3cff79114829b588967 # v1.0.252
+        uses: anthropics/claude-code-action@61a9c274fa7110a66dfafc1bbbced03833eb25fe # v1.0.269
         env: *claude-env
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}