diff --git a/.github/workflows/issue-validation.yml b/.github/workflows/issue-validation.yml
index 1c203c20..68696ce1 100644
--- a/.github/workflows/issue-validation.yml
+++ b/.github/workflows/issue-validation.yml
@@ -662,7 +662,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
 
       - name: Run opencode
-        uses: anomalyco/opencode/github@6f3639d82ed0760091792189b78f8eeb44f699b1 #v2.0.15
+        uses: anomalyco/opencode/github@84c9be93a56304a108f1a22df0c5d62c26d5b6ca #v2.0.20
         env:
           ZHIPU_API_KEY: ${{ secrets.ZHIPU_API_KEY }}
           TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/lint-rs.yml b/.github/workflows/lint-rs.yml
index 5007d156..a8fbdc3d 100644
--- a/.github/workflows/lint-rs.yml
+++ b/.github/workflows/lint-rs.yml
@@ -59,7 +59,7 @@ jobs:
           cache: "pnpm"
 
       - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de #master
+        uses: dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067 #master
         with:
           toolchain: stable
           components: rustfmt, clippy
diff --git a/.github/workflows/linux-packages.yml b/.github/workflows/linux-packages.yml
index 2a00a08f..d00fc368 100644
--- a/.github/workflows/linux-packages.yml
+++ b/.github/workflows/linux-packages.yml
@@ -73,7 +73,7 @@ jobs:
           cache: "pnpm"
 
       - name: Setup Rust
-        uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de #master
+        uses: dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067 #master
         with:
           toolchain: stable
 
diff --git a/.github/workflows/publish-sidecars.yml b/.github/workflows/publish-sidecars.yml
index 35309729..be485cf8 100644
--- a/.github/workflows/publish-sidecars.yml
+++ b/.github/workflows/publish-sidecars.yml
@@ -96,7 +96,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install Rust
-        uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+        uses: dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067 # master
         with:
           toolchain: stable
           targets: ${{ matrix.target }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1f636218..162caf39 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -115,7 +115,7 @@ jobs:
           cache: "pnpm"
 
       - name: Setup Rust
-        uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de #master
+        uses: dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067 #master
         with:
           toolchain: stable
           targets: ${{ matrix.target }}
diff --git a/.github/workflows/rolling-release.yml b/.github/workflows/rolling-release.yml
index e27696db..a1f8ba9c 100644
--- a/.github/workflows/rolling-release.yml
+++ b/.github/workflows/rolling-release.yml
@@ -124,7 +124,7 @@ jobs:
           cache: "pnpm"
 
       - name: Setup Rust
-        uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de #master
+        uses: dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067 #master
         with:
           toolchain: stable
           targets: ${{ matrix.target }}
diff --git a/.github/workflows/spellcheck.yml b/.github/workflows/spellcheck.yml
index 2d51b0b8..eb5088e4 100644
--- a/.github/workflows/spellcheck.yml
+++ b/.github/workflows/spellcheck.yml
@@ -32,4 +32,4 @@ jobs:
         with:
           persist-credentials: false
       - name: Spell Check Repo
-        uses: crate-ci/typos@512fc24f32f44ab01972217aaaf3dc86ec234d53 #v1.50.2
+        uses: crate-ci/typos@00f422f3b19c57bc6338715ebfe3316d38768461 #v1.50.3