diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock
index a8e8dcc..5c1e68c 100644
--- a/.github/workflows/actions.lock
+++ b/.github/workflows/actions.lock
@@ -6,18 +6,18 @@ workflows:
     '.github/workflows/ci.yml':
         - 'actions/checkout@v7.0.1'
         - 'codecov/codecov-action@v7.1.1'
-        - 'jdx/jactionlint@v2.2.0'
-        - 'jdx/mise-action@v5.2.1'
+        - 'jdx/jactionlint@v2.3.0'
+        - 'jdx/mise-action@v5.2.3'
         - 'sonarsource/sonarqube-scan-action@v8.3.0'
     '.github/workflows/docs.yml':
         - 'actions/checkout@v7.0.1'
         - 'actions/github-script@v9.0.0'
         - 'cloudflare/wrangler-action@v4.1.3'
-        - 'jdx/mise-action@v5.2.1'
+        - 'jdx/mise-action@v5.2.3'
     '.github/workflows/release.yml':
         - 'actions/checkout@v7.0.1'
         - 'googleapis/release-please-action@v5.0.0'
-        - 'jdx/mise-action@v5.2.1'
+        - 'jdx/mise-action@v5.2.3'
 dependencies:
     'actions/checkout@v7.0.1':
         ref: 'v7.0.1'
@@ -56,16 +56,16 @@ dependencies:
         commit: 'sha1-45996ed1f6d02564a971a2fa1b5860e934307cf7'
         owner_id: 16785467
         repo_id: 262236530
-    'jdx/jactionlint@v2.2.0':
-        ref: 'v2.2.0'
-        commit: 'sha1-1027f0a131ab98bc7e191d995bfa15dbed5bbf8f'
+    'jdx/jactionlint@v2.3.0':
+        ref: 'v2.3.0'
+        commit: 'sha1-a65ab044e916760429068fe5794b8306abdfcbb9'
         owner_id: 216188
         repo_id: 1404951382
         uses:
             - 'github/codeql-action@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2'
-    'jdx/mise-action@v5.2.1':
-        ref: 'v5.2.1'
-        commit: 'sha1-fc42bcc7ddbf51124c30f95a877a0c5168a3bfde'
+    'jdx/mise-action@v5.2.3':
+        ref: 'v5.2.3'
+        commit: 'sha1-82a612c5ab8bcda7cc5db6b7e81a8e7584c3dc6e'
         owner_id: 216188
         repo_id: 738284564
     'sonarsource/sonarqube-scan-action@v8.3.0':
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 64052b0..05e6ccf 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -34,7 +34,7 @@ jobs:
           gh actions-lock --verify-local
 
       # Installs the tool versions pinned in mise.toml (bun, node)
-      - uses: jdx/mise-action@v5.2.1
+      - uses: jdx/mise-action@v5.2.3
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
@@ -75,4 +75,4 @@ jobs:
           persist-credentials: false
       # Lints the whole repository from its root (workflows, dependabot.yml,
       # actions.lock) with .github/jactionlint.yaml
-      - uses: jdx/jactionlint@v2.2.0
+      - uses: jdx/jactionlint@v2.3.0
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 1fd25a5..6906026 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -33,7 +33,7 @@ jobs:
           persist-credentials: false
       # No tool cache: this job deploys with wrangler, so a poisoned cache
       # entry could end up in the published site
-      - uses: jdx/mise-action@v5.2.1
+      - uses: jdx/mise-action@v5.2.3
         with:
           cache: false
       - run: bun install --frozen-lockfile
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b4d19ee..18d56a7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -54,7 +54,7 @@ jobs:
       # (bun + node, which provides the npm CLI used to publish). No tool
       # cache: this job publishes to npm, so a poisoned cache entry could end
       # up in the published packages.
-      - uses: jdx/mise-action@v5.2.1
+      - uses: jdx/mise-action@v5.2.3
         with:
           cache: false