diff --git a/.github/workflows/md.yml b/.github/workflows/md.yml
index 3871059..9b96613 100644
--- a/.github/workflows/md.yml
+++ b/.github/workflows/md.yml
@@ -22,7 +22,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: qltysh/qlty-action/install@fd52dc852530a708d68c3b7342f8d33d1df4cd55 # v2.2.1
+      - uses: qltysh/qlty-action/install@08a0a862c159eae9b9003081da6663d96efef637 # v2.3.0
 
       - name: Lint + format check (markdownlint)
         run: qlty check --all --filter=markdownlint
diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml
index b40ffd5..2505b2a 100644
--- a/.github/workflows/php.yml
+++ b/.github/workflows/php.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Install dependencies
         run: composer install --no-interaction --prefer-dist
 
-      - uses: qltysh/qlty-action/install@fd52dc852530a708d68c3b7342f8d33d1df4cd55 # v2.2.1
+      - uses: qltysh/qlty-action/install@08a0a862c159eae9b9003081da6663d96efef637 # v2.3.0
 
       - name: Lint (phpstan)
         run: qlty check --all --no-formatters --filter=phpstan
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 2efeefa..3069159 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -22,7 +22,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      - uses: qltysh/qlty-action/install@fd52dc852530a708d68c3b7342f8d33d1df4cd55 # v2.2.1
+      - uses: qltysh/qlty-action/install@08a0a862c159eae9b9003081da6663d96efef637 # v2.3.0
 
       - name: Security scan
         run: qlty check --all --no-formatters --filter=gitleaks,trivy,bandit,osv-scanner
diff --git a/.github/workflows/test-php.yml b/.github/workflows/test-php.yml
index d4d33dc..7d268ac 100644
--- a/.github/workflows/test-php.yml
+++ b/.github/workflows/test-php.yml
@@ -39,7 +39,7 @@ jobs:
 
       - name: Upload coverage to Qlty
         if: matrix.php-version == '8.6'
-        uses: qltysh/qlty-action/coverage@fd52dc852530a708d68c3b7342f8d33d1df4cd55 # v2.2.1
+        uses: qltysh/qlty-action/coverage@08a0a862c159eae9b9003081da6663d96efef637 # v2.3.0
         with:
           coverage-token: ${{ secrets.QLTY_COVERAGE_TOKEN }}
           files: coverage/clover.xml