diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
index 666f69a..8d044bf 100644
--- a/.github/workflows/cla.yml
+++ b/.github/workflows/cla.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check CLA
-        uses: conda/actions/check-cla@7873f9d7c90877290866eb893b8f6eff2e88429a # v25.1.2
+        uses: conda/actions/check-cla@c1c8ebf3059ee1645f9395771671262a7ea8da63 # v25.3.0
         with:
           # [required]
           # A token with ability to comment, label, and modify the commit status
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 6deaa05..c51a857 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -33,7 +33,7 @@ jobs:
             days-before-issue-stale: 90
             days-before-issue-close: 21
     steps:
-      - uses: conda/actions/read-yaml@7873f9d7c90877290866eb893b8f6eff2e88429a # v25.1.2
+      - uses: conda/actions/read-yaml@c1c8ebf3059ee1645f9395771671262a7ea8da63 # v25.3.0
         id: read_yaml
         with:
           path: https://raw.githubusercontent.com/conda/infra/main/.github/messages.yml