diff --git a/.github/workflows/ci_cd.yml b/.github/workflows/ci_cd.yml
index 326b601574..1eb8a08cb8 100644
--- a/.github/workflows/ci_cd.yml
+++ b/.github/workflows/ci_cd.yml
@@ -293,7 +293,7 @@ jobs:
           retention-days: 7
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
+        uses: codecov/codecov-action@ad3126e916f78f00edff4ed0317cf185271ccc2d # v5.4.2
         if: matrix.docker-image == 'core-windows-latest'
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
diff --git a/.github/workflows/nightly_docker_test.yml b/.github/workflows/nightly_docker_test.yml
index fc96f6e6a0..b0f7c3b115 100644
--- a/.github/workflows/nightly_docker_test.yml
+++ b/.github/workflows/nightly_docker_test.yml
@@ -164,7 +164,7 @@ jobs:
         run: docker image prune -f
 
       - name: Microsoft Teams Notification
-        uses: skitionek/notify-microsoft-teams@fab6aca2609ba706ebc981d066278d47ab4af0fc # v1.0.9
+        uses: skitionek/notify-microsoft-teams@755c127ef3757945e5e97508914103d76ef7a925 # v1.0.9
         if: failure()
         with:
           webhook_url: ${{ secrets.MSTEAMS_WEBHOOK }}
@@ -230,7 +230,7 @@ jobs:
           docker rm ${{ env.GEO_CONT_NAME }}
 
       - name: Microsoft Teams Notification
-        uses: skitionek/notify-microsoft-teams@fab6aca2609ba706ebc981d066278d47ab4af0fc # v1.0.9
+        uses: skitionek/notify-microsoft-teams@755c127ef3757945e5e97508914103d76ef7a925 # v1.0.9
         if: failure()
         with:
           webhook_url: ${{ secrets.MSTEAMS_WEBHOOK }}
diff --git a/doc/changelog.d/1915.maintenance.md b/doc/changelog.d/1915.maintenance.md
new file mode 100644
index 0000000000..42c5b14021
--- /dev/null
+++ b/doc/changelog.d/1915.maintenance.md
@@ -0,0 +1 @@
+bump the actions group with 2 updates
\ No newline at end of file