diff --git a/.github/workflows/ci-cookbook-copy.yaml b/.github/workflows/ci-cookbook-copy.yaml
index d5d84d8..c89c3ac 100644
--- a/.github/workflows/ci-cookbook-copy.yaml
+++ b/.github/workflows/ci-cookbook-copy.yaml
@@ -96,7 +96,7 @@ jobs:
     steps:
       - name: "setup environment"
         id: "setup"
-        uses: "KyoriPowered/.github/.github/actions/setup-java-env@trunk"
+        uses: "KyoriPowered/.github/.github/actions/setup-java-env@0fa511f4c6156002fc99d42921700d7609eb6c09" # trunk
         with:
           runtime_version: "${{ inputs.runtime_version }}"
           publishing_branch_regex: "${{ inputs.publishing_branch_regex }}"
@@ -105,7 +105,7 @@ jobs:
         run: "./gradlew ${{ inputs.extra_gradle_params }} build"
       - name: "archive test results"
         if: "${{ always() }}"
-        uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7.0.0
+        uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7.0.1
         with:
           name: "${{ runner.os }}-test-results"
           path: |
@@ -183,7 +183,7 @@ jobs:
           ./gradlew ${{ inputs.extra_gradle_params }} copyJavadoc --output build/publish-jd/${{ inputs.javadoc_deploy_prefix }}
       - name: "authenticate for javadoc publication"
         if: "${{ inputs.publish_release_javadoc && runner.os == 'Linux' && env.STATUS == 'release' && github.event_name == 'release' }}"
-        uses: "actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859" # v3.0.0
+        uses: "actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1" # v3.2.0
         id: jd-token
         with:
           app-id: "${{ secrets.DEPLOYMENT_APP_ID }}"
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
index b52fb7e..a9db115 100644
--- a/gradle/wrapper/gradle-wrapper.properties
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.5.0-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.6.1-bin.zip
 networkTimeout=10000
 retries=0
 retryBackOffMs=500