diff --git a/.github/workflows/ci-python.yml b/.github/workflows/ci-python.yml
index 4a9ff0672..cd0e53021 100644
--- a/.github/workflows/ci-python.yml
+++ b/.github/workflows/ci-python.yml
@@ -45,7 +45,7 @@ jobs:
           args: "format --check"
           src: "./compass"
       - name: Check Python Code Complexity (Complexipy)
-        uses: rohaquinlop/complexipy-action@e2b05bcc06d899a24e2b6bb8b1354ac42800a95e # v7.0.1
+        uses: rohaquinlop/complexipy-action@f4e40e330aa5a2e7fb5e4336b389de4ee9f5009b # v8.0.1
         with:
           paths: "./compass"
           max_complexity_allowed: 10
diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml
index 29e83adc8..0e90b7a78 100644
--- a/.github/workflows/codecov.yml
+++ b/.github/workflows/codecov.yml
@@ -48,7 +48,7 @@ jobs:
         pixi run -e pdev --locked tests-p
 
     - name: Upload coverage to Codecov
-      uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+      uses: codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4 # v7.1.0
       with:
         token: ${{ secrets.CODECOV_TOKEN }}
         files: ./coverage.xml