diff --git a/.github/workflows/analysis.yml b/.github/workflows/analysis.yml
index 47e2594f..95132113 100644
--- a/.github/workflows/analysis.yml
+++ b/.github/workflows/analysis.yml
@@ -23,9 +23,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 1
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 #v6
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # 0.36.0
         with:
           format: "sarif"
           output: "trivy-results.sarif"
diff --git a/.github/workflows/argo-cd.yml b/.github/workflows/argo-cd.yml
index 6106330a..4ddd3051 100644
--- a/.github/workflows/argo-cd.yml
+++ b/.github/workflows/argo-cd.yml
@@ -52,7 +52,7 @@ jobs:
        # Variables
       - if: ${{ ! inputs.tag }}
         id: pr
-        uses: bcgov/action-get-pr@bfa713a9ab410c0f0c13126c35983934fc80d15b # v0.1.1
+        uses: bcgov/action-get-pr@3931962bf13b3f4702d0013ec7c836f752ff1a3b # v0.3.0
       - id: vars
         run: |
           # Tag defaults to explicitly provided input, then PR number, then the branch name
@@ -70,7 +70,7 @@ jobs:
           # Output
           echo "tag=${tag}" >> $GITHUB_OUTPUT
       - name: Checkout GitOps repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: 'bcgov-c/tenant-gitops-2d982c'
           token: ${{ secrets.GITOPS_REPO_PAT }}
@@ -102,7 +102,7 @@ jobs:
         package: [api, twm, client]
     timeout-minutes: 2
     steps:
-      - uses: shrink/actions-docker-registry-tag@v4
+      - uses: shrink/actions-docker-registry-tag@v5
         with:
           registry: ghcr.io
           repository: ${{ github.repository }}/${{ matrix.package }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 17ae2d7a..c4044e57 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -36,9 +36,9 @@ jobs:
             build-mode: manual
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 #v6
 
-      - uses: actions/setup-dotnet@d4c94342e560b34958eacfc5d055d21461ed1c5d #v5
+      - uses: actions/setup-dotnet@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2 #v5
         if: matrix.language == 'csharp'
         with:
           dotnet-version: 7.0.x
diff --git a/.github/workflows/create-prod-v-tag.yaml b/.github/workflows/create-prod-v-tag.yaml
index f4835b12..a760baa0 100644
--- a/.github/workflows/create-prod-v-tag.yaml
+++ b/.github/workflows/create-prod-v-tag.yaml
@@ -86,7 +86,7 @@ jobs:
       matrix:
         package: [php, nginx]
     steps:
-      - uses: shrink/actions-docker-registry-tag@v4
+      - uses: shrink/actions-docker-registry-tag@v5
         with:
           registry: ghcr.io
           repository: ${{ github.repository }}/${{ matrix.package }}
diff --git a/.github/workflows/create-test-rc-tag.yaml b/.github/workflows/create-test-rc-tag.yaml
index 8bd9d04a..40992bb4 100644
--- a/.github/workflows/create-test-rc-tag.yaml
+++ b/.github/workflows/create-test-rc-tag.yaml
@@ -125,7 +125,7 @@ jobs:
       matrix:
         package: [api, twm, client]
     steps:
-      - uses: shrink/actions-docker-registry-tag@v4
+      - uses: shrink/actions-docker-registry-tag@v5
         with:
           registry: ghcr.io
           repository: ${{ github.repository }}/${{ matrix.package }}
@@ -144,7 +144,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Create GitHub Pre-release with Release Notes
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           tag_name: ${{ inputs.rc_tag }}
           prerelease: true
diff --git a/.github/workflows/merge.yml b/.github/workflows/merge.yml
index add921de..7abcf585 100644
--- a/.github/workflows/merge.yml
+++ b/.github/workflows/merge.yml
@@ -28,7 +28,7 @@ jobs:
       - name: Get PR Number From Event
         if: github.event_name == 'push'
         id: pr_no
-        uses: bcgov/action-get-pr@bf6c85d0ed23a151f2829956c140fde87979bbf2 #v0.2.0
+        uses: bcgov/action-get-pr@3931962bf13b3f4702d0013ec7c836f752ff1a3b #v0.3.0
       - name: PR Number
         id: pr
         run: echo pr=${{ steps.pr_no.outputs.pr || inputs.pr}} >> $GITHUB_OUTPUT
@@ -57,7 +57,7 @@ jobs:
     steps:
       - id: sha
         run: echo "short=sha-${GITHUB_SHA:0:7}" >> $GITHUB_OUTPUT
-      - uses: shrink/actions-docker-registry-tag@v4
+      - uses: shrink/actions-docker-registry-tag@v5
         with:
           registry: ghcr.io
           repository: ${{ github.repository }}/${{ matrix.package }}
diff --git a/.github/workflows/pr-open.yml b/.github/workflows/pr-open.yml
index d3221217..efca4ea6 100644
--- a/.github/workflows/pr-open.yml
+++ b/.github/workflows/pr-open.yml
@@ -43,7 +43,7 @@ jobs:
     steps:
       - name: PR Number
         id: pr
-        uses: bcgov/action-get-pr@bfa713a9ab410c0f0c13126c35983934fc80d15b #v0.1.1
+        uses: bcgov/action-get-pr@3931962bf13b3f4702d0013ec7c836f752ff1a3b #v0.3.0
 
   # https://github.com/bcgov/action-builder-ghcr
   builds:
@@ -58,7 +58,7 @@ jobs:
         package: [api, client, twm]
     timeout-minutes: 10
     steps:
-      - uses: bcgov/action-builder-ghcr@2b24ac7f95e6a019064151498660437cca3202c5 #v4.2.1
+      - uses: bcgov/action-builder-ghcr@cb2629351c87dd1c2130073e4ebb7233a9653a63 #v4.4.1
         with:
           package: '${{ matrix.package }}'
           build_context: ${{ matrix.package }}