diff --git a/.github/workflows/build-gossamer-gui.yml b/.github/workflows/build-gossamer-gui.yml
index c106408d..2780d86d 100644
--- a/.github/workflows/build-gossamer-gui.yml
+++ b/.github/workflows/build-gossamer-gui.yml
@@ -143,7 +143,7 @@ jobs:
           targets: wasm32-unknown-unknown
 
       - name: Install just
-        uses: taiki-e/install-action@v2.87.24
+        uses: taiki-e/install-action@v2.87.25
         with:
           # Pin an explicit modern just: the Justfile uses `import?`
           # (optional import, just >= 1.19.0). Unversioned `tool: just`
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5a2e266f..f7eda357 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -120,7 +120,7 @@ jobs:
           components: llvm-tools-preview
 
       - name: Install cargo-llvm-cov
-        uses: taiki-e/install-action@v2.87.24
+        uses: taiki-e/install-action@v2.87.25
         with:
           tool: cargo-llvm-cov
 
diff --git a/.github/workflows/security-policy.yml b/.github/workflows/security-policy.yml
index e1483bf6..e4810626 100644
--- a/.github/workflows/security-policy.yml
+++ b/.github/workflows/security-policy.yml
@@ -140,7 +140,7 @@ jobs:
         uses: actions/checkout@v7.0.1
 
       - name: Install cargo-deny
-        uses: taiki-e/install-action@v2.87.24
+        uses: taiki-e/install-action@v2.87.25
         with:
           tool: cargo-deny
 
@@ -472,7 +472,7 @@ jobs:
       # ======================================================================
 
       - name: Gate A — verified credentials fail the gate
-        uses: trufflesecurity/trufflehog@v3.97.9
+        uses: trufflesecurity/trufflehog@v3.98.0
         with:
           path: ./
           base: ${{ steps.th.outputs.base }}
@@ -481,7 +481,7 @@ jobs:
           extra_args: --results=verified
 
       - name: Gate B — private keys fail the gate even when unverified
-        uses: trufflesecurity/trufflehog@v3.97.9
+        uses: trufflesecurity/trufflehog@v3.98.0
         with:
           path: ./
           base: ${{ steps.th.outputs.base }}
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 97b502f3..de26811f 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -559,7 +559,7 @@ jobs:
           components: llvm-tools-preview
 
       - name: Install cargo-llvm-cov
-        uses: taiki-e/install-action@v2.87.24
+        uses: taiki-e/install-action@v2.87.25
         with:
           tool: cargo-llvm-cov