diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 9b89477..8c09133 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -35,10 +35,10 @@ jobs:
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
         # yamllint disable-line rule:line-length
-        uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93  # v3.30.5
+        uses: github/codeql-action/init@16140ae1a102900babc80a33c44059580f687047  # v4.30.9
         with:
           languages: python
 
       - name: Perform CodeQL Analysis
         # yamllint disable-line rule:line-length
-        uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93  # v3.30.5
+        uses: github/codeql-action/analyze@16140ae1a102900babc80a33c44059580f687047  # v4.30.9
diff --git a/.github/workflows/gerrit-verify.yaml b/.github/workflows/gerrit-verify.yaml
index cb13cd3..a81b4db 100644
--- a/.github/workflows/gerrit-verify.yaml
+++ b/.github/workflows/gerrit-verify.yaml
@@ -200,12 +200,12 @@ jobs:
           python-version: "3.11"
       - name: Initialize CodeQL
         # yamllint disable-line rule:line-length
-        uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93  # v3.30.5
+        uses: github/codeql-action/init@16140ae1a102900babc80a33c44059580f687047  # v4.30.9
         with:
           languages: python
       - name: Perform CodeQL Analysis
         # yamllint disable-line rule:line-length
-        uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93  # v3.30.5
+        uses: github/codeql-action/analyze@16140ae1a102900babc80a33c44059580f687047  # v4.30.9
 
   finalize:
     needs: test