diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 406cf19bac..def8c54b95 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -86,7 +86,7 @@ jobs:
       # anyone who can see the workflow run.
       - name: Attach the SARIF to this run
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: codeql-sarif-${{ matrix.language }}
           path: sarif-results
diff --git a/.github/workflows/combine_and_report.yml b/.github/workflows/combine_and_report.yml
index 06ffd45dba..7fead98ca6 100644
--- a/.github/workflows/combine_and_report.yml
+++ b/.github/workflows/combine_and_report.yml
@@ -15,7 +15,7 @@ jobs:
           persist-credentials: false
       - name: Download artifacts
         if: ${{ !cancelled() }}
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         with:
           path: artifacts
 
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 92c03f6930..b2bfc2a5a6 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -45,7 +45,7 @@ jobs:
 
       - name: Archive selenium screenshots
         if: ${{ failure() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: selenium-screenshots
           path: |
diff --git a/.github/workflows/rspec.yml b/.github/workflows/rspec.yml
index 9d15d93eac..29f6eda925 100644
--- a/.github/workflows/rspec.yml
+++ b/.github/workflows/rspec.yml
@@ -54,7 +54,7 @@ jobs:
           cache: "npm"
       - run: npm ci
 
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: tmp/parallel_runtime_rspec.log
           key: parallel-runtime-${{ github.head_ref || github.ref_name }}-${{ github.run_id }}-${{ github.run_attempt }}
@@ -113,7 +113,7 @@ jobs:
 
       - name: Archive selenium screenshots
         if: ${{ failure() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: selenium-screenshots
           path: |
diff --git a/Gemfile.lock b/Gemfile.lock
index 909a9d2e6e..7532ddc318 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -636,10 +636,9 @@ GEM
     unicode-emoji (4.3.0)
     uri (1.1.2)
     useragent (0.16.11)
-    view_component (4.16.0)
+    view_component (4.19.0)
       actionview (>= 7.1.0)
       activesupport (>= 7.1.0)
-      concurrent-ruby (~> 1)
     warden (1.2.9)
       rack (>= 2.0.9)
     web-console (4.3.0)