diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index ea6b066..0f43e8d 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -45,7 +45,7 @@ jobs:
           NX_REJECT_UNKNOWN_LOCAL_CACHE: 0
 
       - name: Codecov
-        uses: codecov/codecov-action@v4.4.1
+        uses: codecov/codecov-action@v4.5.0
         if: hashFiles('coverage/**/*') != ''
         with:
           directory: coverage
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 9505591..1177a86 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -9,10 +9,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4.1.6
+        uses: actions/checkout@v4.1.7
 
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v40.1.11
+        uses: renovatebot/github-action@v40.1.12
         env:
           LOG_LEVEL: debug
           NX_CLOUD_AUTH_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}