diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
index a1b3264d8..0f24abff4 100644
--- a/.github/workflows/backport.yml
+++ b/.github/workflows/backport.yml
@@ -45,6 +45,6 @@ jobs:
         # so it needs the credentials that actions/checkout leaves behind.
         - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         - name: Create backport pull requests
-          uses: korthout/backport-action@6b65649031ac6d18ffdfd0c0820e9436f3fde22b  # v4.6.1
+          uses: korthout/backport-action@8560fb503c275d433c56f05a2f64850093baa9f7  # v4.7.0
           with:
             label_pattern: '^port/(.+)$'
diff --git a/.github/workflows/canary.yml b/.github/workflows/canary.yml
index fabc8057e..b01ccae44 100644
--- a/.github/workflows/canary.yml
+++ b/.github/workflows/canary.yml
@@ -146,7 +146,7 @@ jobs:
           restore-keys: |
             windows-msys2-pip-
 
-      - uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884  # v2.32.0
+      - uses: msys2/setup-msys2@ec48f7c5447b3140e2b088413ae3a55687bccb6e  # v2.33.0
         with:
           msystem: UCRT64
           update: true
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e331e03d2..d1c23b3e4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1203,7 +1203,7 @@ jobs:
           restore-keys: |
             windows-msys2-pip-
 
-      - uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884  # v2.32.0
+      - uses: msys2/setup-msys2@ec48f7c5447b3140e2b088413ae3a55687bccb6e  # v2.33.0
         with:
           msystem: UCRT64
           update: true