diff --git a/.github/actions/build-docker/action.yml b/.github/actions/build-docker/action.yml
index ed294a3..559e67a 100644
--- a/.github/actions/build-docker/action.yml
+++ b/.github/actions/build-docker/action.yml
@@ -46,7 +46,7 @@ runs:
 
     - name: Set up Docker Buildx
       if: inputs.use-buildkit == 'true'
-      uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+      uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
 
     - name: Build
       shell: bash
diff --git a/.github/actions/node-deploy-cdk/action.yml b/.github/actions/node-deploy-cdk/action.yml
index 61fdc03..ef520ec 100644
--- a/.github/actions/node-deploy-cdk/action.yml
+++ b/.github/actions/node-deploy-cdk/action.yml
@@ -117,7 +117,7 @@ runs:
 
     - name: Configure AWS Credentials (access key)
       if: ${{ inputs.aws-access-key-id && inputs.aws-secret-access-key }}
-      uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6.1.1
+      uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1
       with:
         aws-access-key-id: ${{ inputs.aws-access-key-id }}
         aws-secret-access-key: ${{ inputs.aws-secret-access-key }}
@@ -125,7 +125,7 @@ runs:
 
     - name: Configure AWS Credentials (GitHub federation)
       if: ${{ inputs.aws-account-id && inputs.aws-role-name }}
-      uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6.1.1
+      uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1
       with:
         role-to-assume: arn:aws:iam::${{ inputs.aws-account-id }}:role/${{ inputs.aws-role-name }}
         aws-region: ${{ inputs.aws-region }}
diff --git a/.github/workflows/ensure-sha-pinned-actions.yml b/.github/workflows/ensure-sha-pinned-actions.yml
index f83bd44..b680373 100644
--- a/.github/workflows/ensure-sha-pinned-actions.yml
+++ b/.github/workflows/ensure-sha-pinned-actions.yml
@@ -56,7 +56,7 @@ jobs:
 
       - name: Ensure SHA pinned actions
         id: pinned-actions
-        uses: makerxstudio/shared-config/.github/actions/ensure-sha-pinned-actions@762d74b20f86935a14bf51f82d493d09ca9324e9 # v2.2.0
+        uses: makerxstudio/shared-config/.github/actions/ensure-sha-pinned-actions@f63ff1396281237d8c4be30769bf365b15d002ce # v2.4.0
         with:
           allowlist: ${{ inputs.allowlist }}
           exemptions: ${{ inputs.exemptions }}
diff --git a/.github/workflows/python-uv-build-zip.yml b/.github/workflows/python-uv-build-zip.yml
index 0c40d64..b7a24b3 100644
--- a/.github/workflows/python-uv-build-zip.yml
+++ b/.github/workflows/python-uv-build-zip.yml
@@ -67,7 +67,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up uv with caching
-        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
         with:
           enable-cache: true
 
diff --git a/.github/workflows/python-uv-ci.yml b/.github/workflows/python-uv-ci.yml
index 61b4dfc..3555bbd 100644
--- a/.github/workflows/python-uv-ci.yml
+++ b/.github/workflows/python-uv-ci.yml
@@ -135,7 +135,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up uv with caching
-        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
         with:
           enable-cache: true