diff --git a/.github/workflows/build-beta.yml b/.github/workflows/build-beta.yml
index 4498b12..8352bb1 100644
--- a/.github/workflows/build-beta.yml
+++ b/.github/workflows/build-beta.yml
@@ -23,7 +23,7 @@ jobs:
     outputs:
       v: ${{ steps.read.outputs.v }}
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - id: read
@@ -42,7 +42,7 @@ jobs:
           # Beta serves OTA updates only, so it builds the end-user image
           # (H-3.yaml), not the first-flash Factory image.
           - { yaml: Integrations/ESPHome/H-3.yaml, name: firmware-standard }
-    uses: esphome/workflows/.github/workflows/build.yml@025a1e6255610c498ed590403b7e510b69e474df # 2026.4.1
+    uses: esphome/workflows/.github/workflows/build.yml@0fdd5e311b7e744069166696072a1a9cbc5fbeb6 # 2026.8.1
     with:
       files: ${{ matrix.yaml }}
       esphome-version: stable