diff --git a/.github/actions/save-logs/action.yaml b/.github/actions/save-logs/action.yaml
index 21887dbb3..88ed686e8 100644
--- a/.github/actions/save-logs/action.yaml
+++ b/.github/actions/save-logs/action.yaml
@@ -34,7 +34,7 @@ runs:
         sudo chown $USER /tmp/uds-*.log || echo ""
       shell: bash
 
-    - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+    - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
       with:
         name: debug-log${{ inputs.suffix }}
         path: |
diff --git a/.github/actions/setup/action.yaml b/.github/actions/setup/action.yaml
index f228bf78f..44bd3bf11 100644
--- a/.github/actions/setup/action.yaml
+++ b/.github/actions/setup/action.yaml
@@ -39,7 +39,7 @@ runs:
       uses: defenseunicorns/lula-action/setup@badad8c4b1570095f57e66ffd62664847698a3b9 # v0.0.1
       with:
         # renovate: datasource=github-tags depName=defenseunicorns/lula versioning=semver-coerced
-        version: v0.5.1
+        version: v0.6.0
 
     - name: Iron Bank Login
       if: ${{ inputs.registry1Username != '' }}
diff --git a/.github/workflows/commitlint.yaml b/.github/workflows/commitlint.yaml
index 29445f7cd..7fe978793 100644
--- a/.github/workflows/commitlint.yaml
+++ b/.github/workflows/commitlint.yaml
@@ -24,8 +24,8 @@ jobs:
 
       - name: Install commitlint
         run: |
-          npm install --save-dev @commitlint/config-conventional@19.2.2
-          npm install --save-dev @commitlint/cli@19.3.0
+          npm install --save-dev @commitlint/config-conventional@19.4.1
+          npm install --save-dev @commitlint/cli@19.4.1
 
       - name: Lint PR title
         env:
diff --git a/.github/workflows/compliance.yaml b/.github/workflows/compliance.yaml
index bde42c35e..74b8d54d3 100644
--- a/.github/workflows/compliance.yaml
+++ b/.github/workflows/compliance.yaml
@@ -68,7 +68,7 @@ jobs:
           ghToken: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload Evaluated Assessment
-        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
         with:
           name: ${{ inputs.flavor }}-assessment-results
           path: ./compliance/oscal-assessment-results.yaml
diff --git a/.github/workflows/test-eks.yaml b/.github/workflows/test-eks.yaml
index 6f871e0a6..acaded852 100644
--- a/.github/workflows/test-eks.yaml
+++ b/.github/workflows/test-eks.yaml
@@ -55,7 +55,7 @@ jobs:
         run: uds run -f tasks/iac.yaml install-eksctl --no-progress
 
       - name: Setup Tofu
-        uses: opentofu/setup-opentofu@ae80d4ecaab946d8f5ff18397fbf6d0686c6d46a # v1.0.3
+        uses: opentofu/setup-opentofu@12f4debbf681675350b6cd1f0ff8ecfbda62027b # v1.0.4
         with:
           tofu_version: 1.8.1
           tofu_wrapper: false
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 2cf5e7282..fca5ce590 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -71,7 +71,7 @@ jobs:
 
       - name: Upload Assessment
         if: ${{ inputs.package == 'all' && inputs.test_type == 'install' }}
-        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
         with:
           name: ${{ inputs.flavor }}-assessment-results
           path: ./compliance/oscal-assessment-results.yaml