diff --git a/.github/workflows/close-stale.yaml b/.github/workflows/close-stale.yaml
index 5978d1aac5d..f6f5e116359 100644
--- a/.github/workflows/close-stale.yaml
+++ b/.github/workflows/close-stale.yaml
@@ -28,7 +28,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639    # v9.1.0
+      - uses: actions/stale@997185467fa4f803885201cee163a9f38240193d    # v10.1.1
         with:
           # Labels need to match with the ones in `labeler.yaml`!
           only-labels: waiting-for-user
diff --git a/.github/workflows/develocity-publish-build-scans.yaml b/.github/workflows/develocity-publish-build-scans.yaml
index 2a87945214b..59d0f7cd5e7 100644
--- a/.github/workflows/develocity-publish-build-scans.yaml
+++ b/.github/workflows/develocity-publish-build-scans.yaml
@@ -31,12 +31,12 @@ jobs:
     steps:
 
       - name: Setup Build Scan link capture
-        uses: gradle/develocity-actions/setup-maven@4a2aed82eea165ba2d5c494fc2a8730d7fdff229   # 1.4
+        uses: gradle/develocity-actions/setup-maven@09247f276f2bc73be8ebd0efced38273412d38d0   # 2.0
         with:
           capture-build-scan-links: true
 
       - name: Publish Build Scans
-        uses: gradle/develocity-actions/maven-publish-build-scan@4a2aed82eea165ba2d5c494fc2a8730d7fdff229   # 1.4
+        uses: gradle/develocity-actions/maven-publish-build-scan@09247f276f2bc73be8ebd0efced38273412d38d0   # 2.0
         with:
           develocity-url: 'https://develocity.apache.org'
           develocity-access-key: ${{ secrets.DEVELOCITY_ACCESS_KEY }}