diff --git a/.github/workflows/generate-protos.yml b/.github/workflows/generate-protos.yml
index ed7496cd7db..876174f76c1 100644
--- a/.github/workflows/generate-protos.yml
+++ b/.github/workflows/generate-protos.yml
@@ -65,7 +65,7 @@ jobs:
         run: make build-protos
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
           token: ${{ secrets.PR_TOKEN_BOT }}
           title: "chore: regenerate protos"
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index bfb4ef57b05..4fa29ec9ad2 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -42,7 +42,7 @@ jobs:
 
       # Upload the results as artifacts (optional).
       - name: "Upload artifact"
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: SARIF file
           path: results.sarif
diff --git a/.github/workflows/snapshots.yml b/.github/workflows/snapshots.yml
index 1f01de54337..4a9fafa9131 100644
--- a/.github/workflows/snapshots.yml
+++ b/.github/workflows/snapshots.yml
@@ -33,7 +33,7 @@ jobs:
         env:
           OSV_API_BASE_URL: api.test.osv.dev
           UPDATE_SNAPS: always
-      - uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
+      - uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
           token: ${{ secrets.PR_TOKEN_BOT }}
           title: "test: update apitester snapshots"
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 492be386ec6..80e49a56ea6 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -20,4 +20,4 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
+        uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
diff --git a/gcp/api/googleapis b/gcp/api/googleapis
index bf85cad8abc..939ba3bf840 160000
--- a/gcp/api/googleapis
+++ b/gcp/api/googleapis
@@ -1 +1 @@
-Subproject commit bf85cad8abc13cd38d42b0cf8545d323243ff7e2
+Subproject commit 939ba3bf8408af83f0f73ae35c76c4b11a8c8c8d