diff --git a/.github/workflows/__test-workflow-continuous-integration.yml b/.github/workflows/__test-workflow-continuous-integration.yml
index b247771..b8806ce 100644
--- a/.github/workflows/__test-workflow-continuous-integration.yml
+++ b/.github/workflows/__test-workflow-continuous-integration.yml
@@ -64,7 +64,7 @@ jobs:
       packages: write
       issues: read
       pull-requests: read
-    uses: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml@a0bab9151cc074af9f6c8204ab42a48d2d570379 # 0.30.6
+    uses: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml@df8b445f6cc9661dcb282d897d7146a82e5f2960 # 0.31.0
     with:
       sign: false
       images: |
diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index bc440b2..d38471e 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -294,10 +294,10 @@ jobs:
     runs-on: *ci-runner
     steps:
       - uses: hoverkraft-tech/ci-github-common/actions/checkout@f5847cb398fe65d53794e6aba98ebdfa0801f691 # 0.32.0
-      - uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+      - uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
         with:
           languages: ${{ inputs.code-ql }}
-      - uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+      - uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
 
   dependency-review:
     name: 🛡️ Dependency Review
diff --git a/actions/codecov/action.yml b/actions/codecov/action.yml
index 5109386..16c6ca2 100644
--- a/actions/codecov/action.yml
+++ b/actions/codecov/action.yml
@@ -53,7 +53,7 @@ runs:
 
     - name: Install missing Codecov dependencies
       if: steps.check-codecov-deps.outputs.missing-deps
-      uses: pkgxdev/setup@f211ee4db3110b42e5a156282372527e7c1ed723 # v4.0.0
+      uses: pkgxdev/setup@4d4ae97af87ccb39ab8be4e073dea697fef2c6f7 # v5.0.0
       with:
         +: ${{ steps.check-codecov-deps.outputs.missing-deps }}
 
@@ -157,7 +157,7 @@ runs:
           }
 
     - name: 📊 Upload coverage to Codecov
-      uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+      uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5.5.3
       with:
         directory: ${{ steps.working-directory.outputs.workspace-relative-path }}
         root_dir: ${{ steps.working-directory.outputs.workspace-relative-path }}
diff --git a/actions/dependencies-cache/action.yml b/actions/dependencies-cache/action.yml
index 770a45d..07189ee 100644
--- a/actions/dependencies-cache/action.yml
+++ b/actions/dependencies-cache/action.yml
@@ -57,7 +57,7 @@ runs:
 
     - name: ♻️ NX cache
       if: fromJson(steps.has-installed-dependencies.outputs.installed-dependencies).nx == true
-      uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
       with:
         path: ${{ steps.working-directory.outputs.workspace-relative-path }}/node_modules/.cache/nx
         key: ${{ runner.os }}-cache-nx-${{ github.sha }}
@@ -66,7 +66,7 @@ runs:
 
     - name: ♻️ Prettier cache
       if: fromJson(steps.has-installed-dependencies.outputs.installed-dependencies).prettier == true
-      uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
       with:
         path: ${{ steps.working-directory.outputs.workspace-relative-path }}/node_modules/.cache/prettier
         key: ${{ runner.os }}-cache-prettier-${{ github.sha }}
@@ -75,7 +75,7 @@ runs:
 
     - name: ♻️ Docusaurus cache
       if: fromJson(steps.has-installed-dependencies.outputs.installed-dependencies).docusaurus == true
-      uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
       with:
         path: |
           ${{ steps.working-directory.outputs.workspace-relative-path }}/.docusaurus
@@ -86,7 +86,7 @@ runs:
 
     - name: ♻️ Vitest cache
       if: fromJson(steps.has-installed-dependencies.outputs.installed-dependencies).vitest == true
-      uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
       with:
         path: ${{ steps.working-directory.outputs.workspace-relative-path }}/node_modules/.vite/vitest
         key: ${{ runner.os }}-cache-vitest-${{ github.sha }}
@@ -95,7 +95,7 @@ runs:
 
     - name: ♻️ Astro cache
       if: fromJson(steps.has-installed-dependencies.outputs.installed-dependencies).astro == true
-      uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
       with:
         path: ${{ steps.working-directory.outputs.workspace-relative-path }}/node_modules/.astro
         key: ${{ runner.os }}-cache-astro-${{ github.sha }}
@@ -104,7 +104,7 @@ runs:
 
     - name: ♻️ Gatsby cache
       if: fromJson(steps.has-installed-dependencies.outputs.installed-dependencies).gatsby == true
-      uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
       with:
         path: |
           ${{ steps.working-directory.outputs.workspace-relative-path }}/.cache
@@ -115,7 +115,7 @@ runs:
 
     - name: ♻️ Storybook cache
       if: fromJson(steps.has-installed-dependencies.outputs.installed-dependencies).storybook == true
-      uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
       with:
         path: ${{ steps.working-directory.outputs.workspace-relative-path }}/node_modules/.cache/storybook
         key: ${{ runner.os }}-cache-storybook-${{ github.sha }}
@@ -191,7 +191,7 @@ runs:
 
     - name: ♻️ Test cache
       if: steps.jest-cache-dir-path.outputs.dir
-      uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
       with:
         path: ${{ steps.jest-cache-dir-path.outputs.dir }}
         key: ${{ runner.os }}-test-${{ github.sha }}
diff --git a/actions/setup-node/action.yml b/actions/setup-node/action.yml
index faa4731..5945a4b 100644
--- a/actions/setup-node/action.yml
+++ b/actions/setup-node/action.yml
@@ -120,7 +120,7 @@ runs:
           core.debug('packageManager field missing; defaulting pnpm version to latest');
           core.setOutput('pnpm-version', 'latest');
 
-    - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
+    - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
       if: steps.get-package-manager.outputs.package-manager == 'pnpm'
       with:
         version: ${{ steps.get-pnpm-version.outputs.pnpm-version }}