diff --git a/.github/workflows/atomic.yaml b/.github/workflows/atomic.yaml
index ed39135..8961053 100644
--- a/.github/workflows/atomic.yaml
+++ b/.github/workflows/atomic.yaml
@@ -49,13 +49,13 @@ jobs:
       - name: Free Disk Space
         uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       - name: GitHub SHA Short
         id: sha_short
         run: echo "sha_short=${GITHUB_SHA::7}" >> "${GITHUB_OUTPUT}"
       - name: Docker Image Metadata From GitHub Repository
         # yamllint disable-line rule:line-length
-        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
         id: generate_labels
         with:
           images: |
diff --git a/.github/workflows/dagger-update.yaml b/.github/workflows/dagger-update.yaml
index 3bbece7..3b823eb 100644
--- a/.github/workflows/dagger-update.yaml
+++ b/.github/workflows/dagger-update.yaml
@@ -26,7 +26,7 @@ jobs:
       contents: write # allow workflow to write to PR
     steps:
       - name: checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           # should be used for PRs only
           # https://github.com/marketplace/actions/add-commit#working-with-prs
diff --git a/.github/workflows/pull_request_aqua_update_checksum.yaml b/.github/workflows/pull_request_aqua_update_checksum.yaml
index 0123f49..298c50a 100644
--- a/.github/workflows/pull_request_aqua_update_checksum.yaml
+++ b/.github/workflows/pull_request_aqua_update_checksum.yaml
@@ -10,7 +10,7 @@ permissions:
 jobs:
   aqua-update-checksums:
     # yamllint disable-line rule:line-length
-    uses: aquaproj/update-checksum-workflow/.github/workflows/update-checksum.yaml@d248abb88efce715d50eb324100d9b29a20f7d18 # v1.0.4 # renovate: depName=aquaproj/update-checksum-workflow
+    uses: aquaproj/update-checksum-workflow/.github/workflows/update-checksum.yaml@eba908314cdc3b2ab7fb7546950c05a666effbc0 # v1.0.5 # renovate: depName=aquaproj/update-checksum-workflow
     permissions:
       contents: read
     with:
diff --git a/.github/workflows/reusable-toolbox.yaml b/.github/workflows/reusable-toolbox.yaml
index 3b2a36a..628b69d 100644
--- a/.github/workflows/reusable-toolbox.yaml
+++ b/.github/workflows/reusable-toolbox.yaml
@@ -32,13 +32,13 @@ jobs:
       IMAGE_NAME: ${{ inputs.image_name }}
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       - name: GitHub SHA Short
         id: sha_short
         run: echo "sha_short=${GITHUB_SHA::7}" >> "${GITHUB_OUTPUT}"
       - name: Docker Image Metadata From GitHub Repository
         # yamllint disable-line rule:line-length
-        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
         id: generate_labels
         with:
           images: |