diff --git a/.github/workflows/pr-validation.yml b/.github/workflows/pr-validation.yml
index 90d6e11f..00f94e54 100644
--- a/.github/workflows/pr-validation.yml
+++ b/.github/workflows/pr-validation.yml
@@ -13,10 +13,10 @@ jobs:
   # the build isn't quite Linux-ready
     runs-on: windows-latest
     steps:
-    - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         persist-credentials: false
-    - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1
+    - uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
       with:
         global-json-file: global.json
     - run: |
@@ -25,7 +25,7 @@ jobs:
         DOTNET_ROLL_FORWARD: LatestMajor
         # NuGet package vulnerability errors should not block PR validation.
         WarningsNotAsErrors: NU1901;NU1902;NU1903;NU1904
-    - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with: 
         name: tests
         path: bin\Debug\net8.0
@@ -36,14 +36,14 @@ jobs:
       matrix:
         sqlImage: ['2022','2019']
     steps:
-    - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         persist-credentials: false
-    - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1
+    - uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
       with:
         global-json-file: global.json
     - name: Download build files
-      uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+      uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
       with: 
         name: tests
         path: tests
@@ -64,7 +64,7 @@ jobs:
       env: 
         DOTNET_ROLL_FORWARD: LatestMajor
     - name: Upload test results
-      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+      uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with: 
         name: test-results-${{ matrix.sqlImage }}
         path: TestResults