From 54713122f2d5201301fd1d354d152e63530eda98 Mon Sep 17 00:00:00 2001
From: "app-token-issuer-releng-renovate[bot]"
 <142360764+app-token-issuer-releng-renovate[bot]@users.noreply.github.com>
Date: Sat, 7 Dec 2024 00:03:01 +0000
Subject: [PATCH] chore(deps): update minor-patch dependencies grouped by
 manager

---
 .github/workflows/pull-request-main.yml       | 20 +++++++++----------
 .github/workflows/push-main.yml               | 10 +++++-----
 .github/workflows/run-e2e-tests.yml           | 20 +++++++++----------
 .github/workflows/run-integration-tests.yml   | 10 +++++-----
 .github/workflows/schedule-renovate.yml       |  2 +-
 .../workflows/solidity-review-artifacts.yml   | 16 +++++++--------
 actions/ci-benchmarking/action.yml            | 12 +++++------
 actions/ci-kubeconform/action.yml             |  4 ++--
 actions/ci-lint-charts/action.yml             |  2 +-
 actions/ci-lint-go/action.yml                 |  6 +++---
 actions/ci-lint-misc/action.yml               |  4 ++--
 actions/ci-lint-ts/action.yml                 |  2 +-
 actions/ci-prettier/action.yml                |  2 +-
 actions/ci-sonarqube-go/action.yml            |  4 ++--
 actions/ci-sonarqube-ts/action.yml            |  4 ++--
 actions/ci-test-go/action.yml                 |  2 +-
 actions/ci-test-sol/action.yml                |  2 +-
 actions/ci-test-ts/action.yml                 |  2 +-
 .../action.yml                                |  8 ++++----
 .../action.yml                                |  2 +-
 actions/cicd-build-publish-charts/action.yml  |  2 +-
 actions/cicd-build-publish-docker/action.yml  |  6 +++---
 actions/cicd-changesets/action.yml            |  2 +-
 actions/cleanup-old-branches/action.yml       |  2 +-
 actions/crib-deploy-environment/action.yml    |  4 ++--
 actions/ctf-build-image/action.yml            | 10 +++++-----
 actions/ctf-build-test-image/action.yml       | 12 +++++------
 actions/ctf-setup-go/action.yml               |  8 ++++----
 .../action.yml                                |  8 ++++----
 .../guard-from-missing-changesets/action.yml  |  2 +-
 actions/guard-tag-from-branch/action.yml      |  2 +-
 actions/helm-version-bump-receiver/action.yml |  4 ++--
 actions/llm-action-error-reporter/action.yml  |  4 ++--
 actions/llm-pr-writer/action.yml              |  4 ++--
 actions/md-confluence-sync/action.yml         |  4 ++--
 actions/pr-slack-alert/action.yml             |  2 +-
 actions/setup-golang/action.yml               |  6 +++---
 actions/setup-nodejs/action.yml               |  4 ++--
 actions/setup-renovate/action.yml             |  4 ++--
 actions/slack-notify-git-ref/action.yml       |  4 ++--
 actions/update-actions/action.yml             |  2 +-
 41 files changed, 115 insertions(+), 115 deletions(-)

diff --git a/.github/workflows/pull-request-main.yml b/.github/workflows/pull-request-main.yml
index 86b98f69..b3f209b7 100644
--- a/.github/workflows/pull-request-main.yml
+++ b/.github/workflows/pull-request-main.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: ci-lint
         uses: ./actions/ci-lint-ts
@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: ci-prettier
         uses: ./actions/ci-prettier
@@ -37,7 +37,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: ci-lint-misc
         uses: ./actions/ci-lint-misc
@@ -53,7 +53,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
         with:
           # Commit back any changes based on the commit that triggered this action
           # rather than merge commit of main into the PR branch
@@ -68,7 +68,7 @@ jobs:
         run: pnpm nx run signed-commits:build
 
       - name: Commit back any changes
-        uses: planetscale/ghcommit-action@b68767a2e130a71926b365322e62b583404a5e09 # v0.1.43
+        uses: planetscale/ghcommit-action@d4176bfacef926cc2db351eab20398dfc2f593b5 # v0.2.0
         with:
           commit_message: "🤖 Update build"
           repo: ${{ github.repository }}
@@ -80,7 +80,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: Setup pnpm
         uses: ./actions/setup-nodejs
@@ -94,7 +94,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: ci-test
         uses: ./actions/ci-test-ts
@@ -107,7 +107,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: ci-build-artifacts
         uses: ./actions/cicd-build-publish-artifacts-ts
@@ -120,7 +120,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: Setup pnpm
         uses: ./actions/setup-nodejs
@@ -139,7 +139,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: Setup pnpm
         uses: ./actions/setup-nodejs
diff --git a/.github/workflows/push-main.yml b/.github/workflows/push-main.yml
index 578a7410..955fd2d7 100644
--- a/.github/workflows/push-main.yml
+++ b/.github/workflows/push-main.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: ci-lint
         uses: ./actions/ci-lint-ts
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: ci-prettier
         uses: ./actions/ci-prettier
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: ci-test
         uses: ./actions/ci-test-ts
@@ -56,7 +56,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
         with:
           fetch-depth: 0
 
@@ -74,7 +74,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/run-e2e-tests.yml b/.github/workflows/run-e2e-tests.yml
index d9a60278..51613dcd 100644
--- a/.github/workflows/run-e2e-tests.yml
+++ b/.github/workflows/run-e2e-tests.yml
@@ -331,7 +331,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
       - name: Install citool
         shell: bash
         run: go install
@@ -375,9 +375,9 @@ jobs:
       workflow_id: ${{ steps.gen_id.outputs.workflow_id }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
       - name: Setup Go
-        uses: actions/setup-go@v5.0.2
+        uses: actions/setup-go@v5.1.0
         with:
           go-version: "1.22.6"
           check-latest: true
@@ -520,7 +520,7 @@ jobs:
           }}
     steps:
       - name: Checkout the repo
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: Get Chainlink image
         uses: ./.github/actions/build-chainlink-image
@@ -557,7 +557,7 @@ jobs:
           }}
     steps:
       - name: Checkout the repo
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: Get Chainlink plugins image
         uses: ./.github/actions/build-chainlink-image
@@ -608,7 +608,7 @@ jobs:
         if: inputs.collect_test_telemetry
         uses: catchpoint/workflow-telemetry-action@94c3c3d9567a0205de6da68a76c428ce4e769af1 # v2.0.0
       - name: Checkout repository
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
       - name: Install jq
         run: sudo apt-get install -y jq
 
@@ -848,7 +848,7 @@ jobs:
         }}.amazonaws.com/chainlink-tests
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
       - name: Build Test Runner Image
         id: build-test-runner-image
         uses: smartcontractkit/.github/actions/ctf-build-test-image@main # main branch
@@ -908,7 +908,7 @@ jobs:
         if: inputs.collect_test_telemetry
         uses: catchpoint/workflow-telemetry-action@94c3c3d9567a0205de6da68a76c428ce4e769af1 # v2.0.0
       - name: Checkout repository
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
       - name: Install jq
         run: sudo apt-get install -y jq
 
@@ -1075,7 +1075,7 @@ jobs:
           "$GITHUB_OUTPUT"
 
       - name: Send Slack notification
-        uses: slackapi/slack-github-action@6c661ce58804a1a20f6dc5fbee7f0381b469e001 # v1.25.0
+        uses: slackapi/slack-github-action@fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3 # v1.27.1
         if:
           ${{ inputs.slack_notification_after_tests == 'true' ||
           inputs.slack_notification_after_tests == 'always' ||
@@ -1119,7 +1119,7 @@ jobs:
           contains(join(needs.*.result, ','), 'failure') &&
           inputs.slack_notification_after_tests_notify_user_id_on_failure != ''
           }}
-        uses: slackapi/slack-github-action@6c661ce58804a1a20f6dc5fbee7f0381b469e001 # v1.25.0
+        uses: slackapi/slack-github-action@fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3 # v1.27.1
         env:
           SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
         with:
diff --git a/.github/workflows/run-integration-tests.yml b/.github/workflows/run-integration-tests.yml
index 13500f2c..90de2a2e 100644
--- a/.github/workflows/run-integration-tests.yml
+++ b/.github/workflows/run-integration-tests.yml
@@ -119,9 +119,9 @@ jobs:
       workflow_id: ${{ steps.gen_id.outputs.workflow_id }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
       - name: Setup Go
-        uses: actions/setup-go@v5.0.2
+        uses: actions/setup-go@v5.1.0
         with:
           go-version: "1.22.6"
           check-latest: true
@@ -198,7 +198,7 @@ jobs:
       TEST_ID: ${{ matrix.tests.id_sanitized || matrix.tests.id }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
       - name: Wait for postgres to be ready
         run: |
           until pg_isready -h localhost -p 5432 -U postgres; do
@@ -332,7 +332,7 @@ jobs:
           "$GITHUB_OUTPUT"
 
       - name: Send Slack notification
-        uses: slackapi/slack-github-action@6c661ce58804a1a20f6dc5fbee7f0381b469e001 # v1.25.0
+        uses: slackapi/slack-github-action@fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3 # v1.27.1
         if:
           ${{ inputs.slack_notification_after_tests == 'true' ||
           inputs.slack_notification_after_tests == 'always' ||
@@ -376,7 +376,7 @@ jobs:
           contains(join(needs.*.result, ','), 'failure') &&
           inputs.slack_notification_after_tests_notify_user_id_on_failure != ''
           }}
-        uses: slackapi/slack-github-action@6c661ce58804a1a20f6dc5fbee7f0381b469e001 # v1.25.0
+        uses: slackapi/slack-github-action@fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3 # v1.27.1
         env:
           SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
         with:
diff --git a/.github/workflows/schedule-renovate.yml b/.github/workflows/schedule-renovate.yml
index cf50bb14..9447abe0 100644
--- a/.github/workflows/schedule-renovate.yml
+++ b/.github/workflows/schedule-renovate.yml
@@ -15,7 +15,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout repo (needed to reference local action)
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/solidity-review-artifacts.yml b/.github/workflows/solidity-review-artifacts.yml
index 9cd7840b..053d56d2 100644
--- a/.github/workflows/solidity-review-artifacts.yml
+++ b/.github/workflows/solidity-review-artifacts.yml
@@ -135,7 +135,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout the caller repository
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
         with:
           fetch-depth: 0
 
@@ -195,7 +195,7 @@ jobs:
     needs: [gather-basic-info]
     steps:
       - name: Checkout the caller repository
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
         with:
           ref: ${{ env.head_ref }}
 
@@ -220,7 +220,7 @@ jobs:
       # required for code coverage report generation
       - name: Setup LCOV
         if: ${{ inputs.generate_code_coverage == true }}
-        uses: hrishikesh-kadam/setup-lcov@f5da1b26b0dcf5d893077a3c4f29cf78079c841d # v1.0.0
+        uses: hrishikesh-kadam/setup-lcov@6c1aa0cc9e1c02f9f58f01ac599f1064ccc83470 # v1.1.0
 
       - name: Run Forge build for product contracts
         run: |
@@ -291,13 +291,13 @@ jobs:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Checkout caller repository
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
         with:
           fetch-depth: 0
           ref: ${{ env.head_ref }}
 
       - name: Checkout .github repository
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
         with:
           repository: smartcontractkit/.github
           ref: 65249c7eae628aad6e70a0c0850d981cd0074bf9
@@ -321,7 +321,7 @@ jobs:
 
       - name: Set up Python
         if: ${{ inputs.generate_slither_reports == true }}
-        uses: actions/setup-python@v5.2.0
+        uses: actions/setup-python@v5.3.0
         with:
           python-version: "3.8"
 
@@ -446,13 +446,13 @@ jobs:
 
       - name: Checkout caller repository
         if: ${{ inputs.link_with_jira == true }}
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
         with:
           ref: ${{ env.head_ref }}
 
       - name: Checkout chainlink-github-actions repository
         if: ${{ inputs.link_with_jira == true }}
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
         with:
           repository: smartcontractkit/.github
           ref: 65249c7eae628aad6e70a0c0850d981cd0074bf9
diff --git a/actions/ci-benchmarking/action.yml b/actions/ci-benchmarking/action.yml
index cc54769f..7269103d 100644
--- a/actions/ci-benchmarking/action.yml
+++ b/actions/ci-benchmarking/action.yml
@@ -53,10 +53,10 @@ runs:
   using: "composite"
   steps:
     - name: Checkout Code
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
 
     - name: Setup Go Environment
-      uses: actions/setup-go@v5.0.2
+      uses: actions/setup-go@v5.1.0
       with:
         go-version: "stable"
 
@@ -100,14 +100,14 @@ runs:
 
     - name: Download Previous Benchmark Data
       if: ${{ env.IS_PR == 'true' || env.IS_MERGE == 'true' }}
-      uses: actions/cache@v4.1.1
+      uses: actions/cache@v4.2.0
       with:
         path: ./cache
         key: ${{ runner.os }}-benchmark
 
     - name: Run github-action-benchmark for PRs
       if: ${{ env.IS_PR == 'true' }}
-      uses: benchmark-action/github-action-benchmark@4de1bed97a47495fc4c5404952da0499e31f5c29 # v1.20.3
+      uses: benchmark-action/github-action-benchmark@d48d326b4ca9ba73ca0cd0d59f108f9e02a381c7 # v1.20.4
       with:
         tool: "go"
         output-file-path: output.txt
@@ -120,7 +120,7 @@ runs:
 
     - name: Run github-action-benchmark for Merges
       if: ${{ env.IS_MERGE == 'true' }}
-      uses: benchmark-action/github-action-benchmark@4de1bed97a47495fc4c5404952da0499e31f5c29 # v1.20.3
+      uses: benchmark-action/github-action-benchmark@d48d326b4ca9ba73ca0cd0d59f108f9e02a381c7 # v1.20.4
       with:
         tool: "go"
         output-file-path: output.txt
@@ -132,7 +132,7 @@ runs:
 
     - name: Upload Updated Benchmark Data
       if: ${{ env.IS_MERGE == 'true' }}
-      uses: actions/cache@v4.1.1
+      uses: actions/cache@v4.2.0
       with:
         path: ./cache
         key: ${{ runner.os }}-benchmark
diff --git a/actions/ci-kubeconform/action.yml b/actions/ci-kubeconform/action.yml
index 5a980bed..76b355a4 100644
--- a/actions/ci-kubeconform/action.yml
+++ b/actions/ci-kubeconform/action.yml
@@ -45,12 +45,12 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
     - name: Install Go
-      uses: actions/setup-go@v5.0.2
+      uses: actions/setup-go@v5.1.0
       with:
         go-version-file: ${{ inputs.go-version-file }}
 
diff --git a/actions/ci-lint-charts/action.yml b/actions/ci-lint-charts/action.yml
index f69026bb..ad0babf7 100644
--- a/actions/ci-lint-charts/action.yml
+++ b/actions/ci-lint-charts/action.yml
@@ -30,7 +30,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/ci-lint-go/action.yml b/actions/ci-lint-go/action.yml
index cc43b275..e58eaf8e 100644
--- a/actions/ci-lint-go/action.yml
+++ b/actions/ci-lint-go/action.yml
@@ -73,7 +73,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
@@ -108,14 +108,14 @@ runs:
         envFile: ${{ inputs.env-files }}
 
     - name: Setup go
-      uses: actions/setup-go@v5.0.2
+      uses: actions/setup-go@v5.1.0
       with:
         go-version-file: ${{ inputs.go-version-file }}
         cache: ${{ inputs.use-go-cache }}
         cache-dependency-path: ${{ inputs.go-cache-dep-path }}
 
     - name: Setup golangci-lint
-      uses: golangci/golangci-lint-action@aaa42aa0628b4ae2578232a66b541047968fac86 # v6.1.0
+      uses: golangci/golangci-lint-action@971e284b6050e8a5849b72094c50ab08da042db8 # v6.1.1
       with:
         version: ${{ inputs.golangci-lint-version }}
         args: ${{ inputs.golangci-lint-args }}
diff --git a/actions/ci-lint-misc/action.yml b/actions/ci-lint-misc/action.yml
index 44d2551c..1e29b814 100644
--- a/actions/ci-lint-misc/action.yml
+++ b/actions/ci-lint-misc/action.yml
@@ -17,12 +17,12 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
     - name: Run actionlint
-      uses: reviewdog/action-actionlint@4f8f9963ca57a41e5fd5b538dd79dbfbd3e0b38a # v1.54.0
+      uses: reviewdog/action-actionlint@08ef4afa963243489a457cca426f705ce4e0d1a5 # v1.60.0
 
     - name: Run shellcheck
       uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # v2.0.0
diff --git a/actions/ci-lint-ts/action.yml b/actions/ci-lint-ts/action.yml
index 6a0afa8b..4fd7d90b 100644
--- a/actions/ci-lint-ts/action.yml
+++ b/actions/ci-lint-ts/action.yml
@@ -34,7 +34,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/ci-prettier/action.yml b/actions/ci-prettier/action.yml
index 64fcbc05..c4f81154 100644
--- a/actions/ci-prettier/action.yml
+++ b/actions/ci-prettier/action.yml
@@ -36,7 +36,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/ci-sonarqube-go/action.yml b/actions/ci-sonarqube-go/action.yml
index 1a9d7f84..a3e1aec1 100644
--- a/actions/ci-sonarqube-go/action.yml
+++ b/actions/ci-sonarqube-go/action.yml
@@ -50,7 +50,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
@@ -94,7 +94,7 @@ runs:
         echo "SONARQUBE_ARGS=$ARGS" >> $GITHUB_ENV
 
     - name: SonarQube Scan
-      uses: sonarsource/sonarqube-scan-action@0c0f3958d90fc466625f1d1af1f47bddd4cc6bd1 # v3.0.0
+      uses: sonarsource/sonarqube-scan-action@13990a695682794b53148ff9f6a8b6e22e43955e # v3.1.0
       with:
         args: ${{ env.SONARQUBE_ARGS }}
       env:
diff --git a/actions/ci-sonarqube-ts/action.yml b/actions/ci-sonarqube-ts/action.yml
index ba845b59..dd152169 100644
--- a/actions/ci-sonarqube-ts/action.yml
+++ b/actions/ci-sonarqube-ts/action.yml
@@ -54,7 +54,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
@@ -110,7 +110,7 @@ runs:
         steps.sonarqube_report_paths.outputs.sonarqube_lint_report_paths }}
 
     - name: SonarQube Scan
-      uses: sonarsource/sonarqube-scan-action@0c0f3958d90fc466625f1d1af1f47bddd4cc6bd1 # v3.0.0
+      uses: sonarsource/sonarqube-scan-action@13990a695682794b53148ff9f6a8b6e22e43955e # v3.1.0
       with:
         args: ${{ env.SONARQUBE_ARGS }}
       env:
diff --git a/actions/ci-test-go/action.yml b/actions/ci-test-go/action.yml
index 0b840bf8..6cc9b084 100644
--- a/actions/ci-test-go/action.yml
+++ b/actions/ci-test-go/action.yml
@@ -98,7 +98,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/ci-test-sol/action.yml b/actions/ci-test-sol/action.yml
index 81888e1d..545963ee 100644
--- a/actions/ci-test-sol/action.yml
+++ b/actions/ci-test-sol/action.yml
@@ -55,7 +55,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/ci-test-ts/action.yml b/actions/ci-test-ts/action.yml
index ab33e57b..a4780cb4 100644
--- a/actions/ci-test-ts/action.yml
+++ b/actions/ci-test-ts/action.yml
@@ -34,7 +34,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/cicd-build-publish-artifacts-go/action.yml b/actions/cicd-build-publish-artifacts-go/action.yml
index f5a9549f..977c29c9 100644
--- a/actions/cicd-build-publish-artifacts-go/action.yml
+++ b/actions/cicd-build-publish-artifacts-go/action.yml
@@ -110,7 +110,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
         ref: ${{ inputs.checkout-ref }}
@@ -140,7 +140,7 @@ runs:
           "https://github.com/"
 
     - name: Setup go
-      uses: actions/setup-go@v5.0.2
+      uses: actions/setup-go@v5.1.0
       with:
         go-version-file: ${{ inputs.go-version-file }}
         cache: ${{ inputs.use-go-cache }}
@@ -148,12 +148,12 @@ runs:
 
     - name: Setup zig
       if: inputs.use-zig == 'true'
-      uses: goto-bus-stop/setup-zig@7ab2955eb728f5440978d5824358023be3a2802d # v2.2.0
+      uses: goto-bus-stop/setup-zig@abea47f85e598557f500fa1fd2ab7464fcb39406 # v2.2.1
       with:
         version: ${{ inputs.zig-version }}
 
     - name: Setup docker buildx
-      uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1
+      uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
 
     - name: Set up qemu
       uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
diff --git a/actions/cicd-build-publish-artifacts-ts/action.yml b/actions/cicd-build-publish-artifacts-ts/action.yml
index 07f972b1..96522a82 100644
--- a/actions/cicd-build-publish-artifacts-ts/action.yml
+++ b/actions/cicd-build-publish-artifacts-ts/action.yml
@@ -70,7 +70,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/cicd-build-publish-charts/action.yml b/actions/cicd-build-publish-charts/action.yml
index 80103640..154691b5 100644
--- a/actions/cicd-build-publish-charts/action.yml
+++ b/actions/cicd-build-publish-charts/action.yml
@@ -48,7 +48,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/cicd-build-publish-docker/action.yml b/actions/cicd-build-publish-docker/action.yml
index 0fa05f74..d9a8d17f 100644
--- a/actions/cicd-build-publish-docker/action.yml
+++ b/actions/cicd-build-publish-docker/action.yml
@@ -59,7 +59,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
@@ -82,7 +82,7 @@ runs:
 
     - name: Docker meta
       id: docker_meta
-      uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1
+      uses: docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96 # v5.6.1
       env:
         aliasSegment:
           ${{ inputs.registry-type=='public' && format('{0}/',
@@ -99,7 +99,7 @@ runs:
 
     - name: Build and push
       id: build-push
-      uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6.7.0
+      uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0
       with:
         push: ${{ inputs.publish }}
         file: ${{ inputs.dockerfile }}
diff --git a/actions/cicd-changesets/action.yml b/actions/cicd-changesets/action.yml
index 387866d1..f5e24ba0 100644
--- a/actions/cicd-changesets/action.yml
+++ b/actions/cicd-changesets/action.yml
@@ -99,7 +99,7 @@ runs:
         url: ${{ inputs.aws-lambda-url }}
 
     - name: Checkout repo
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
         token: ${{ steps.get-gh-token.outputs.access-token }}
diff --git a/actions/cleanup-old-branches/action.yml b/actions/cleanup-old-branches/action.yml
index c15c0935..c706c471 100644
--- a/actions/cleanup-old-branches/action.yml
+++ b/actions/cleanup-old-branches/action.yml
@@ -42,7 +42,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/crib-deploy-environment/action.yml b/actions/crib-deploy-environment/action.yml
index 41ad6857..8590591a 100644
--- a/actions/crib-deploy-environment/action.yml
+++ b/actions/crib-deploy-environment/action.yml
@@ -125,7 +125,7 @@ runs:
         proxy-port: 8888
 
     - name: Checkout crib repo
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         repository: "smartcontractkit/crib"
         ref: ${{ inputs.crib-repo-ref }}
@@ -276,7 +276,7 @@ runs:
         failure() && inputs.crib-alert-slack-webhook != '' && inputs.send-alerts
         == 'true'
       id: slack
-      uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0
+      uses: slackapi/slack-github-action@fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3 # v1.27.1
       with:
         # For posting a rich message using Block Kit
         payload: ${{ steps.render-slack-template.outputs.result }}
diff --git a/actions/ctf-build-image/action.yml b/actions/ctf-build-image/action.yml
index cb24ce3a..dc11b4ba 100644
--- a/actions/ctf-build-image/action.yml
+++ b/actions/ctf-build-image/action.yml
@@ -67,11 +67,11 @@ runs:
   steps:
     - name: Checkout Chainlink repo
       if: ${{ inputs.should_checkout == 'true' }}
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         repository: ${{ inputs.cl_repo }}
         ref: ${{ inputs.cl_ref }}
-    - uses: actions/setup-go@v5.0.2
+    - uses: actions/setup-go@v5.1.0
       env:
         GOPRIVATE: ${{ inputs.GOPRIVATE }}
       with:
@@ -158,7 +158,7 @@ runs:
         fi
     - name: Configure AWS Credentials
       if: steps.push.outputs.push == 'true'
-      uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1
+      uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
       with:
         aws-region: ${{ inputs.QA_AWS_REGION }}
         role-to-assume: ${{ inputs.QA_AWS_ROLE_TO_ASSUME }}
@@ -172,9 +172,9 @@ runs:
         mask-password: "true"
     - name: Set up Docker Buildx
       if: steps.push.outputs.push == 'true'
-      uses: docker/setup-buildx-action@0d103c3126aa41d772a8362f6aa67afac040f80c # v3.1.0
+      uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
     - name: Build and Push
-      uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0
+      uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
       with:
         context: .
         file: ${{ inputs.cl_dockerfile }}
diff --git a/actions/ctf-build-test-image/action.yml b/actions/ctf-build-test-image/action.yml
index d6b260c3..24e20e21 100644
--- a/actions/ctf-build-test-image/action.yml
+++ b/actions/ctf-build-test-image/action.yml
@@ -53,7 +53,7 @@ runs:
     # Base Test Image Logic
     - name: Get CTF Version
       id: version
-      uses: smartcontractkit/chainlink-github-actions/chainlink-testing-framework/mod-version@fc3e0df622521019f50d772726d6bf8dc919dd38 # v2.3.19
+      uses: smartcontractkit/chainlink-github-actions/chainlink-testing-framework/mod-version@1ada5d85b0de3439a0ba238210d40605b5ed6704 # v2.3.32
       with:
         go-project-path: ./integration-tests
         module-name: github.com/smartcontractkit/chainlink-testing-framework/lib
@@ -70,7 +70,7 @@ runs:
         echo "short_sha=${short_sha}" >> "$GITHUB_OUTPUT"
     - name: Checkout chainlink-testing-framework
       if: steps.version.outputs.is_semantic == 'false'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         repository: smartcontractkit/chainlink-testing-framework
         ref: main
@@ -90,7 +90,7 @@ runs:
     - name: Check if test base image exists
       if: steps.version.outputs.is_semantic == 'false'
       id: check-base-image
-      uses: smartcontractkit/chainlink-github-actions/docker/image-exists@75a9005952a9e905649cfb5a6971fd9429436acd # v2.3.25
+      uses: smartcontractkit/chainlink-github-actions/docker/image-exists@1ada5d85b0de3439a0ba238210d40605b5ed6704 # v2.3.32
       with:
         repository: test-base-image
         tag: ${{ steps.long_sha.outputs.long_sha }}
@@ -100,7 +100,7 @@ runs:
       if:
         steps.version.outputs.is_semantic == 'false' &&
         steps.check-base-image.outputs.exists == 'false'
-      uses: smartcontractkit/chainlink-github-actions/docker/build-push@75a9005952a9e905649cfb5a6971fd9429436acd # v2.3.25
+      uses: smartcontractkit/chainlink-github-actions/docker/build-push@1ada5d85b0de3439a0ba238210d40605b5ed6704 # v2.3.32
       env:
         BASE_IMAGE_NAME:
           ${{ inputs.QA_AWS_ACCOUNT_NUMBER }}.dkr.ecr.${{ inputs.QA_AWS_REGION
@@ -126,7 +126,7 @@ runs:
 
     - name: Check if image exists
       id: check-image
-      uses: smartcontractkit/chainlink-github-actions/docker/image-exists@75a9005952a9e905649cfb5a6971fd9429436acd # v2.3.25
+      uses: smartcontractkit/chainlink-github-actions/docker/image-exists@1ada5d85b0de3439a0ba238210d40605b5ed6704 # v2.3.32
       with:
         repository: ${{ inputs.repository }}
         tag: ${{ inputs.tag || steps.test_runner_hash.outputs.hash_value }}
@@ -134,7 +134,7 @@ runs:
         AWS_ROLE_TO_ASSUME: ${{ inputs.QA_AWS_ROLE_TO_ASSUME }}
     - name: Build and Publish Test Runner
       if: steps.check-image.outputs.exists == 'false'
-      uses: smartcontractkit/chainlink-github-actions/docker/build-push@75a9005952a9e905649cfb5a6971fd9429436acd # v2.3.25
+      uses: smartcontractkit/chainlink-github-actions/docker/build-push@1ada5d85b0de3439a0ba238210d40605b5ed6704 # v2.3.32
       with:
         tags: |
           ${{ inputs.QA_AWS_ACCOUNT_NUMBER }}.dkr.ecr.${{ inputs.QA_AWS_REGION }}.amazonaws.com/${{ inputs.repository }}:${{ inputs.tag || steps.test_runner_hash.outputs.hash_value }}
diff --git a/actions/ctf-setup-go/action.yml b/actions/ctf-setup-go/action.yml
index 446958af..8c940671 100644
--- a/actions/ctf-setup-go/action.yml
+++ b/actions/ctf-setup-go/action.yml
@@ -41,7 +41,7 @@ runs:
   using: composite
   steps:
     - name: Setup Go
-      uses: actions/setup-go@v5.0.2
+      uses: actions/setup-go@v5.1.0
       with:
         go-version: ${{ inputs.go_version }}
         go-version-file: ${{ inputs.go_mod_path }}
@@ -64,7 +64,7 @@ runs:
 
     - name: Cache Go Modules
       if: inputs.cache_restore_only == 'false' && inputs.no_cache == 'false'
-      uses: actions/cache@v4.1.1
+      uses: actions/cache@v4.2.0
       id: cache-packages
       with:
         path: ${{ steps.go-cache-dir.outputs.gomodcache }}
@@ -74,7 +74,7 @@ runs:
         restore-keys: |
           ${{ runner.os }}-${{ inputs.cache_key_id }}-gomod-
 
-    - uses: actions/cache@v4.1.1
+    - uses: actions/cache@v4.2.0
       if: inputs.cache_restore_only == 'false' && inputs.cache_builds == 'true'
       name: Cache Go Builds
       with:
@@ -88,7 +88,7 @@ runs:
 
     - name: Restore Go Modules
       if: inputs.cache_restore_only != 'false' && inputs.no_cache == 'false'
-      uses: actions/cache/restore@v4.1.1
+      uses: actions/cache/restore@v4.2.0
       id: restore-cache-packages
       with:
         path: |
diff --git a/actions/ctf-setup-run-tests-environment/action.yml b/actions/ctf-setup-run-tests-environment/action.yml
index b541996f..63ddbc29 100644
--- a/actions/ctf-setup-run-tests-environment/action.yml
+++ b/actions/ctf-setup-run-tests-environment/action.yml
@@ -85,7 +85,7 @@ runs:
 
     # Setup AWS cred and K8s context
     - name: Configure AWS Credentials
-      uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1
+      uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
       with:
         aws-region: ${{ inputs.QA_AWS_REGION }}
         role-to-assume: ${{ inputs.QA_AWS_ROLE_TO_ASSUME }}
@@ -94,7 +94,7 @@ runs:
 
     - name: Set Kubernetes Context
       if: inputs.QA_KUBECONFIG
-      uses: azure/k8s-set-context@27bfb387305b8f0ab5495d692e4a3304db7d0669 # v4.0.0
+      uses: azure/k8s-set-context@212a19233d93f03eceaac31ae5a1d1acf650b6ef # v4.0.1
       with:
         method: kubeconfig
         kubeconfig: ${{ inputs.QA_KUBECONFIG }}
@@ -112,13 +112,13 @@ runs:
     # To avoid rate limiting from Docker Hub, we can login with a paid user account.
     - name: Login to Docker Hub
       if: inputs.dockerhub_username && inputs.dockerhub_password
-      uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
+      uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
       with:
         username: ${{ inputs.dockerhub_username }}
         password: ${{ inputs.dockerhub_password }}
 
     # Helm Setup
-    - uses: azure/setup-helm@29960d0f5f19214b88e1d9ba750a9914ab0f1a2f # v4.0.0
+    - uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
       with:
         version: v3.13.1
     - name: Add required helm charts including chainlink-qa
diff --git a/actions/guard-from-missing-changesets/action.yml b/actions/guard-from-missing-changesets/action.yml
index 03707db0..89e79795 100644
--- a/actions/guard-from-missing-changesets/action.yml
+++ b/actions/guard-from-missing-changesets/action.yml
@@ -16,7 +16,7 @@ runs:
   steps:
     - name: Checkout full repo
       if: inputs.checkout == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
     - name: Install changesets
       shell: bash
       run: ${{ github.action_path }}/scripts/install-changesets.sh
diff --git a/actions/guard-tag-from-branch/action.yml b/actions/guard-tag-from-branch/action.yml
index 04908de7..35e52cfd 100644
--- a/actions/guard-tag-from-branch/action.yml
+++ b/actions/guard-tag-from-branch/action.yml
@@ -30,7 +30,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
diff --git a/actions/helm-version-bump-receiver/action.yml b/actions/helm-version-bump-receiver/action.yml
index 7bc1ad20..bc2c4012 100644
--- a/actions/helm-version-bump-receiver/action.yml
+++ b/actions/helm-version-bump-receiver/action.yml
@@ -96,7 +96,7 @@ runs:
 
     - name: Bump helm chart version
       id: bump-helm-chart-version
-      uses: mikefarah/yq@f15500b20a1c991c8729870ba60a4dc3524b6a94 # v4.44.2
+      uses: mikefarah/yq@bc5b54cb1d1f720db16c9f75c5b45384d00e5cbf # v4.44.5
       env:
         AWS_SECRET_ACCESS_KEY: ""
         AWS_ACCESS_KEY_ID: ""
@@ -110,7 +110,7 @@ runs:
     - name: Update helm chart repo
       if: inputs.helm-chart-repo-update == 'true'
       id: update-helm-chart-repo
-      uses: mikefarah/yq@f15500b20a1c991c8729870ba60a4dc3524b6a94 # v4.44.2
+      uses: mikefarah/yq@bc5b54cb1d1f720db16c9f75c5b45384d00e5cbf # v4.44.5
       env:
         AWS_SECRET_ACCESS_KEY: ""
         AWS_ACCESS_KEY_ID: ""
diff --git a/actions/llm-action-error-reporter/action.yml b/actions/llm-action-error-reporter/action.yml
index eb44c5be..ed8cae93 100644
--- a/actions/llm-action-error-reporter/action.yml
+++ b/actions/llm-action-error-reporter/action.yml
@@ -43,7 +43,7 @@ runs:
   using: "composite"
   steps:
     - name: Checkout calling repo
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
 
     - name: Check if this run is invoked from a pull request event
       shell: bash
@@ -68,7 +68,7 @@ runs:
 
     - name: Checkout action repo
       if: ${{ env.SKIP_ACTION == 'false' }}
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         repository: smartcontractkit/.github
         ref: ${{ inputs.workflow-ref }}
diff --git a/actions/llm-pr-writer/action.yml b/actions/llm-pr-writer/action.yml
index 8ab55d27..2a6ed766 100644
--- a/actions/llm-pr-writer/action.yml
+++ b/actions/llm-pr-writer/action.yml
@@ -53,13 +53,13 @@ runs:
 
     - name: Checkout calling repo
       if: ${{ env.SKIP_ACTION == 'false' }}
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
     - name: Checkout action repo
       if: ${{ env.SKIP_ACTION == 'false' }}
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         repository: smartcontractkit/.github
         ref: ${{ inputs.workflow-ref }}
diff --git a/actions/md-confluence-sync/action.yml b/actions/md-confluence-sync/action.yml
index e84c02d6..bb1f4902 100644
--- a/actions/md-confluence-sync/action.yml
+++ b/actions/md-confluence-sync/action.yml
@@ -39,7 +39,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
@@ -50,7 +50,7 @@ runs:
         prettier-command: pnpm prettier --check ${{ inputs.files }}
 
     - name: Set up Go
-      uses: actions/setup-go@v5.0.2
+      uses: actions/setup-go@v5.1.0
 
     - name: Setup tools
       shell: bash
diff --git a/actions/pr-slack-alert/action.yml b/actions/pr-slack-alert/action.yml
index 6ca19691..719fef6a 100644
--- a/actions/pr-slack-alert/action.yml
+++ b/actions/pr-slack-alert/action.yml
@@ -56,7 +56,7 @@ runs:
     - name: Send slack alert
       if: steps.filter.outputs.SKIP_SLACK != 'true'
       id: slack
-      uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e #v1.26.0
+      uses: slackapi/slack-github-action@fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3 # v1.27.1
       with:
         channel-id: ${{ inputs.slack-channel-id }}
         # https://api.slack.com/surfaces/messages#payloads
diff --git a/actions/setup-golang/action.yml b/actions/setup-golang/action.yml
index 3d381299..a6dff894 100644
--- a/actions/setup-golang/action.yml
+++ b/actions/setup-golang/action.yml
@@ -26,7 +26,7 @@ runs:
   using: composite
   steps:
     - name: Set up Go
-      uses: actions/setup-go@v5.0.2
+      uses: actions/setup-go@v5.1.0
       with:
         go-version-file: ${{ inputs.go-version-file }}
         cache: ${{ inputs.use-go-cache }}
@@ -44,7 +44,7 @@ runs:
         echo "gomodcache=$(go env GOMODCACHE)" >> $GITHUB_OUTPUT
         echo "gobuildcache=$(go env GOCACHE)" >> $GITHUB_OUTPUT
 
-    - uses: actions/cache@v4.1.1
+    - uses: actions/cache@v4.2.0
       name: Cache Go Modules
       with:
         path: |
@@ -57,7 +57,7 @@ runs:
         restore-keys: |
           ${{ runner.os }}-gomod-${{ inputs.cache-version }}-
 
-    - uses: actions/cache@v4.1.1
+    - uses: actions/cache@v4.2.0
       if: ${{ inputs.only-modules == 'false' }}
       name: Cache Go Build Outputs
       with:
diff --git a/actions/setup-nodejs/action.yml b/actions/setup-nodejs/action.yml
index 72abd5c4..48562b59 100644
--- a/actions/setup-nodejs/action.yml
+++ b/actions/setup-nodejs/action.yml
@@ -29,7 +29,7 @@ runs:
   using: composite
   steps:
     - name: Install node
-      uses: actions/setup-node@v4.0.4
+      uses: actions/setup-node@v4.1.0
       with:
         node-version-file: ${{ inputs.node-version-file }}
 
@@ -48,7 +48,7 @@ runs:
 
     - name: Setup pnpm cache
       if: inputs.use-cache == 'true'
-      uses: actions/cache@v4.1.1
+      uses: actions/cache@v4.2.0
       with:
         path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
         key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
diff --git a/actions/setup-renovate/action.yml b/actions/setup-renovate/action.yml
index 7e6ede06..0e15f44e 100644
--- a/actions/setup-renovate/action.yml
+++ b/actions/setup-renovate/action.yml
@@ -48,7 +48,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
 
@@ -62,7 +62,7 @@ runs:
         aws-role-duration-seconds: ${{ inputs.aws-role-duration-seconds }}
 
     - name: Run renovate
-      uses: renovatebot/github-action@76d49712364696a06b60e8647df46b288fff0ddc # v40.2.4
+      uses: renovatebot/github-action@0984fb80fc633b17e57f3e8b6c007fe0dc3e0d62 # v40.3.6
       with:
         renovate-version: ${{ inputs.renovate-version }}
         token: ${{ steps.get-access-token.outputs.access-token }}
diff --git a/actions/slack-notify-git-ref/action.yml b/actions/slack-notify-git-ref/action.yml
index 999a877e..c1139c77 100644
--- a/actions/slack-notify-git-ref/action.yml
+++ b/actions/slack-notify-git-ref/action.yml
@@ -47,7 +47,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}
     - name: Validate inputs
@@ -109,7 +109,7 @@ runs:
         } >> $GITHUB_ENV
 
     - name: Notify slack
-      uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0
+      uses: slackapi/slack-github-action@fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3 # v1.27.1
       with:
         payload: ${{ env.payload }}
         channel-id: ${{ inputs.slack-channel-id }}
diff --git a/actions/update-actions/action.yml b/actions/update-actions/action.yml
index 89101d28..620b2a16 100644
--- a/actions/update-actions/action.yml
+++ b/actions/update-actions/action.yml
@@ -37,7 +37,7 @@ runs:
   steps:
     - name: Checkout repo
       if: inputs.checkout-repo == 'true'
-      uses: actions/checkout@v4.2.1
+      uses: actions/checkout@v4.2.2
       with:
         fetch-depth: ${{ inputs.checkout-repo-fetch-depth }}