diff --git a/.github/actions/build-node-zip/action.yml b/.github/actions/build-node-zip/action.yml
index 365e3ac..783037e 100644
--- a/.github/actions/build-node-zip/action.yml
+++ b/.github/actions/build-node-zip/action.yml
@@ -39,7 +39,7 @@ runs:
 
     # setup node + private repo access
     - name: Use Node.js ${{ inputs.node-version }}
-      uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
       with:
         node-version: ${{ inputs.node-version }}
         registry-url: 'https://npm.pkg.github.com'
diff --git a/.github/actions/build-node/action.yml b/.github/actions/build-node/action.yml
index 01a670b..db727a8 100644
--- a/.github/actions/build-node/action.yml
+++ b/.github/actions/build-node/action.yml
@@ -33,7 +33,7 @@ runs:
 
     # setup node + private repo access
     - name: Use Node.js ${{ inputs.node-version }}
-      uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
       with:
         node-version: ${{ inputs.node-version }}
         registry-url: 'https://npm.pkg.github.com'
diff --git a/.github/actions/deploy-bicep/action.yml b/.github/actions/deploy-bicep/action.yml
index 1308446..2707849 100644
--- a/.github/actions/deploy-bicep/action.yml
+++ b/.github/actions/deploy-bicep/action.yml
@@ -58,7 +58,7 @@ runs:
   using: 'composite'
   steps:
     - name: Run what-if for Bicep template
-      uses: azure/bicep-deploy@4d5dc29bf04d05546dd5df9c665c54b9c5213207 # v2
+      uses: azure/bicep-deploy@66910e9c5c7733c33a1cd605030d02234b3bc4ed # v2
       if: ${{ inputs.run-what-if == 'true' }}
       with:
         type: deployment
@@ -83,7 +83,7 @@ runs:
 
     - name: Deploy Bicep template
       id: deploy-template
-      uses: azure/bicep-deploy@4d5dc29bf04d05546dd5df9c665c54b9c5213207 # v2
+      uses: azure/bicep-deploy@66910e9c5c7733c33a1cd605030d02234b3bc4ed # v2
       with:
         type: deployment
         operation: create
diff --git a/.github/actions/node-deploy-cdk/action.yml b/.github/actions/node-deploy-cdk/action.yml
index 8dd2cc2..953ab58 100644
--- a/.github/actions/node-deploy-cdk/action.yml
+++ b/.github/actions/node-deploy-cdk/action.yml
@@ -111,7 +111,7 @@ runs:
       shell: bash
 
     - name: Use Node.js ${{ inputs.node-version }}
-      uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
       with:
         node-version: ${{ inputs.node-version }}
 
diff --git a/.github/workflows/node-build-zip.yml b/.github/workflows/node-build-zip.yml
index 0fe6496..48866ea 100644
--- a/.github/workflows/node-build-zip.yml
+++ b/.github/workflows/node-build-zip.yml
@@ -58,7 +58,7 @@ jobs:
 
       # setup node + private repo access
       - name: Use Node.js ${{ inputs.node-version }}
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: ${{ inputs.node-version }}
           registry-url: "https://npm.pkg.github.com"
diff --git a/.github/workflows/node-build.yml b/.github/workflows/node-build.yml
index 4c17710..b1d0617 100644
--- a/.github/workflows/node-build.yml
+++ b/.github/workflows/node-build.yml
@@ -42,7 +42,7 @@ jobs:
 
       # setup node + private repo access
       - name: Use Node.js ${{ inputs.node-version }}
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: ${{ inputs.node-version }}
           registry-url: 'https://npm.pkg.github.com'
diff --git a/.github/workflows/node-ci.yml b/.github/workflows/node-ci.yml
index 12601be..68f1358 100644
--- a/.github/workflows/node-ci.yml
+++ b/.github/workflows/node-ci.yml
@@ -96,7 +96,7 @@ jobs:
 
       # setup node + private repo access
       - name: Use Node.js ${{ inputs.node-version }}
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: ${{ inputs.node-version }}
           registry-url: 'https://npm.pkg.github.com'
diff --git a/.github/workflows/node-pnpm-build-zip.yml b/.github/workflows/node-pnpm-build-zip.yml
index fe58ad1..e423c47 100644
--- a/.github/workflows/node-pnpm-build-zip.yml
+++ b/.github/workflows/node-pnpm-build-zip.yml
@@ -71,7 +71,7 @@ jobs:
           standalone: true
 
       - name: Use Node.js ${{ inputs.node-version }}
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: ${{ inputs.node-version }}
           cache: "pnpm"
diff --git a/.github/workflows/node-publish-internal.yml b/.github/workflows/node-publish-internal.yml
index a3a67ec..7ce850b 100644
--- a/.github/workflows/node-publish-internal.yml
+++ b/.github/workflows/node-publish-internal.yml
@@ -31,7 +31,7 @@ jobs:
 
       # setup node + private repo access
       - name: Use Node.js ${{ inputs.node-version }}
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: ${{ inputs.node-version }}
           registry-url: 'https://npm.pkg.github.com'
diff --git a/.github/workflows/node-publish-public.yml b/.github/workflows/node-publish-public.yml
index e12408b..bfb41b4 100644
--- a/.github/workflows/node-publish-public.yml
+++ b/.github/workflows/node-publish-public.yml
@@ -24,7 +24,7 @@ jobs:
           fetch-depth: 0
 
       - name: Use Node.js ${{ inputs.node-version }}
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: ${{ inputs.node-version }}
           cache: 'npm'
diff --git a/.github/workflows/node-trusted-publish.yml b/.github/workflows/node-trusted-publish.yml
index cbaa8c5..2fbd7c2 100644
--- a/.github/workflows/node-trusted-publish.yml
+++ b/.github/workflows/node-trusted-publish.yml
@@ -31,7 +31,7 @@ jobs:
           fetch-depth: 0
 
       - name: Use Node.js ${{ inputs.node-version }}
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: ${{ inputs.node-version }}
           cache: 'npm'
diff --git a/.github/workflows/python-uv-build-zip.yml b/.github/workflows/python-uv-build-zip.yml
index b39e76e..fdaa2b0 100644
--- a/.github/workflows/python-uv-build-zip.yml
+++ b/.github/workflows/python-uv-build-zip.yml
@@ -63,7 +63,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up uv with caching
-        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
         with:
           enable-cache: true
 
diff --git a/.github/workflows/python-uv-ci.yml b/.github/workflows/python-uv-ci.yml
index a074a0d..2ba21b8 100644
--- a/.github/workflows/python-uv-ci.yml
+++ b/.github/workflows/python-uv-ci.yml
@@ -131,7 +131,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up uv with caching
-        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
         with:
           enable-cache: true