diff --git a/.github/workflows/jreleaser.yml b/.github/workflows/jreleaser.yml
index 8fbff53c6bb..2a58e2b0631 100644
--- a/.github/workflows/jreleaser.yml
+++ b/.github/workflows/jreleaser.yml
@@ -31,7 +31,7 @@ jobs:
           cache: maven
           
       - name: install go
-        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4
+        uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4
       - name: install semversion
         run: go install github.com/ffurrer2/semver/cmd/semver@latest
 # Get current version from pom and remove snapshot if present.
@@ -104,7 +104,7 @@ jobs:
           message: "release: Setting SNAPSHOT version ${{ env.NEXT_VERSION }}"
           branch: ${{ env.BRANCH_NAME }}
       - name: Merge Fast Forward
-        uses: MaximeHeckel/github-action-merge-fast-forward@v1.1.0
+        uses: MaximeHeckel/github-action-merge-fast-forward@9710f422198dd92989b8c076096d03c3bd61e6f4 # v1.1.1
         with:
           # Branch to merge
           branchtomerge: ${{ env.BRANCH_NAME }}
diff --git a/pom.xml b/pom.xml
index ed1b2e51e17..3ffbd054a17 100644
--- a/pom.xml
+++ b/pom.xml
@@ -268,7 +268,7 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-checkstyle-plugin</artifactId>
-        <version>3.2.2</version>
+        <version>3.3.0</version>
         <configuration>
           <failsOnError>true</failsOnError>
           <consoleOutput>true</consoleOutput>
diff --git a/spoon-control-flow/pom.xml b/spoon-control-flow/pom.xml
index bdb4f87f39a..f84f2524cd7 100644
--- a/spoon-control-flow/pom.xml
+++ b/spoon-control-flow/pom.xml
@@ -27,7 +27,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-checkstyle-plugin</artifactId>
-                <version>3.2.2</version>
+                <version>3.3.0</version>
                 <configuration>
                     <failsOnError>true</failsOnError>
                     <configLocation>../checkstyle.xml</configLocation>
diff --git a/spoon-decompiler/pom.xml b/spoon-decompiler/pom.xml
index 452f3e0e720..4f7aefeda32 100644
--- a/spoon-decompiler/pom.xml
+++ b/spoon-decompiler/pom.xml
@@ -82,7 +82,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-checkstyle-plugin</artifactId>
-		        <version>3.2.2</version>
+		        <version>3.3.0</version>
                 <configuration>
                     <failsOnError>true</failsOnError>
                     <configLocation>../checkstyle.xml</configLocation>
diff --git a/spoon-pom/pom.xml b/spoon-pom/pom.xml
index da59e0e49e5..a7e6ac11b95 100644
--- a/spoon-pom/pom.xml
+++ b/spoon-pom/pom.xml
@@ -244,7 +244,7 @@
                 </plugin>
                 <plugin>
                     <artifactId>maven-dependency-plugin</artifactId>
-                    <version>3.5.0</version>
+                    <version>3.6.0</version>
                 </plugin>
                 <plugin>
                     <artifactId>maven-deploy-plugin</artifactId>
@@ -377,7 +377,7 @@
                     <plugin>
                         <groupId>org.apache.maven.plugins</groupId>
                         <artifactId>maven-source-plugin</artifactId>
-                        <version>3.2.1</version>
+                        <version>3.3.0</version>
                         <executions>
                             <execution>
                                 <id>attach-sources</id>
diff --git a/spoon-smpl/pom.xml b/spoon-smpl/pom.xml
index 427b0a8974d..5b1ca25ae8e 100644
--- a/spoon-smpl/pom.xml
+++ b/spoon-smpl/pom.xml
@@ -36,7 +36,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-checkstyle-plugin</artifactId>
-                <version>3.2.2</version>
+                <version>3.3.0</version>
                 <configuration>
                     <failsOnError>true</failsOnError>
                     <configLocation>../checkstyle.xml</configLocation>
diff --git a/spoon-visualisation/pom.xml b/spoon-visualisation/pom.xml
index b5ebee047df..a49c735f6f3 100644
--- a/spoon-visualisation/pom.xml
+++ b/spoon-visualisation/pom.xml
@@ -39,7 +39,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-dependency-plugin</artifactId>
-                <version>3.5.0</version>
+                <version>3.6.0</version>
                 <executions>
                     <execution>
                         <id>main deps</id>