diff --git a/.github/workflows/dependency_review.yml b/.github/workflows/dependency_review.yml
index 690c789cb65222..bb763ad43f966a 100644
--- a/.github/workflows/dependency_review.yml
+++ b/.github/workflows/dependency_review.yml
@@ -13,8 +13,8 @@ jobs:
         timeout-minutes: 15
 
       - name: Dependency Review
-        uses: actions/dependency-review-action@72eb03d02c7872a771aacd928f3123ac62ad6d3a # v4.3.3
+        uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0
         with:
           config-file: './.github/dependency_review.yml'
-          base-ref: ${{ github.pull_request.base.sha || github.event.merge_group.base_ref }}
-          head-ref: ${{ github.pull_request.head.sha || github.ref }}
+          base-ref: ${{ github.event.pull_request.base.sha || github.event.merge_group.base_ref }}
+          head-ref: ${{ github.event.pull_request.head.sha || github.ref }}