diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 2cae625..9264ec1 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -109,7 +109,7 @@ jobs:
           fetch-depth: $CHECKOUT_DEPTH
 
       - name: MegaLinter
-        uses: oxsecurity/megalinter/flavors/cupcake@7e042c726c68415475b05a65a686c612120a1232 # v7.7.0
+        uses: oxsecurity/megalinter/flavors/cupcake@55a59b24a441e0e1943080d4a512d827710d4a9d # v9.2.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           MEGALINTER_CONFIG: ci/.mega-linter.yaml
@@ -157,7 +157,7 @@ jobs:
           python-version: '3.11'
 
       - name: Run pre-commit on all files
-        uses: pre-commit/action@646c83fcd040023954eafda54b4db0192ce70507 # v3.0.0
+        uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1
         with:
           # this should run the pre-commit hooks only on the files changed between the default branch and the one in the PR
           extra_args: --verbose -a
@@ -179,7 +179,7 @@ jobs:
           python-version: '3.11'
 
       - name: Run pre-commit
-        uses: pre-commit/action@646c83fcd040023954eafda54b4db0192ce70507 # v3.0.0
+        uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1
         with:
           # this should run the pre-commit hooks only on the files changed between the default branch and the one in the PR
           extra_args: --verbose --from-ref ${{ needs.get-changed-files.outputs.BASE_REF }} --to-ref HEAD