diff --git a/.github/workflows/c.yaml b/.github/workflows/c.yaml
index 47ca21f95..7d20d4c9b 100644
--- a/.github/workflows/c.yaml
+++ b/.github/workflows/c.yaml
@@ -143,7 +143,7 @@ jobs:
         with:
           submodules: recursive
 
-      - uses: bazelbuild/setup-bazelisk@v2
+      - uses: bazelbuild/setup-bazelisk@v3
 
       - name: Mount bazel cache
         uses: actions/cache@v4
@@ -164,7 +164,7 @@ jobs:
         with:
           submodules: recursive
 
-      - uses: bazelbuild/setup-bazelisk@v2
+      - uses: bazelbuild/setup-bazelisk@v3
 
       - name: Mount bazel cache
         uses: actions/cache@v4
@@ -185,7 +185,7 @@ jobs:
         with:
           submodules: recursive
 
-      - uses: bazelbuild/setup-bazelisk@v2
+      - uses: bazelbuild/setup-bazelisk@v3
 
       - name: Mount bazel cache
         uses: actions/cache@v4
diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
index 32fb6e35b..0ec8fb915 100644
--- a/.github/workflows/sonarcloud.yml
+++ b/.github/workflows/sonarcloud.yml
@@ -9,7 +9,7 @@ name: SonarCloud
 jobs:
   sonarcloud:
     runs-on: ubuntu-latest
-    if: github.actor != 'dependabot' # Dependabot can't read the Sonarcloud secret
+    if: github.actor != 'dependabot[bot]' # Dependabot can't read the Sonarcloud secret
     steps:
       - uses: actions/checkout@v4
         with:
@@ -31,7 +31,7 @@ jobs:
   C:
     name: C Code Coverage
     runs-on: ubuntu-22.04
-    if: github.actor != 'dependabot' # Dependabot can't read the Sonarcloud secret
+    if: github.actor != 'dependabot[bot]' # Dependabot can't read the Sonarcloud secret
     steps:
       - uses: actions/checkout@v4
         with: