diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index 73ad6c7..9202681 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -7,7 +7,7 @@ permissions:
 
 jobs:
   actionlint:
-    uses: devops-actions/.github/.github/workflows/actionlint.yml@891fb6d59e53d81ffc7e9367de68d4ef288f2900 # main
+    uses: devops-actions/.github/.github/workflows/actionlint.yml@5e1e286077541a5a9a984dbd52df15ba382ca025 # main
     permissions:
       contents: read
       pull-requests: write
diff --git a/.github/workflows/actions-dependencies.yml b/.github/workflows/actions-dependencies.yml
index 67a4635..5f60e3f 100644
--- a/.github/workflows/actions-dependencies.yml
+++ b/.github/workflows/actions-dependencies.yml
@@ -11,7 +11,7 @@ permissions:
   
 jobs:
   submit-dependencies:
-    uses: devops-actions/.github/.github/workflows/actions-dependencies.yml@891fb6d59e53d81ffc7e9367de68d4ef288f2900 # main
+    uses: devops-actions/.github/.github/workflows/actions-dependencies.yml@5e1e286077541a5a9a984dbd52df15ba382ca025 # main
     permissions:
       contents: write # Required to read workflow files
       id-token: write # Required for dependency submission
diff --git a/.github/workflows/actions-example-checker.yml b/.github/workflows/actions-example-checker.yml
index 161955a..86c2582 100644
--- a/.github/workflows/actions-example-checker.yml
+++ b/.github/workflows/actions-example-checker.yml
@@ -7,6 +7,6 @@ permissions:
 
 jobs:
   validate-examples:
-    uses: devops-actions/.github/.github/workflows/actions-example-checker.yml@891fb6d59e53d81ffc7e9367de68d4ef288f2900 # main
+    uses: devops-actions/.github/.github/workflows/actions-example-checker.yml@5e1e286077541a5a9a984dbd52df15ba382ca025 # main
     permissions:
       contents: read
\ No newline at end of file
diff --git a/.github/workflows/approve-dependabot-pr.yml b/.github/workflows/approve-dependabot-pr.yml
index ad4a612..ebf88b6 100644
--- a/.github/workflows/approve-dependabot-pr.yml
+++ b/.github/workflows/approve-dependabot-pr.yml
@@ -9,6 +9,6 @@ permissions:
   
 jobs:
   dependabot:
-    uses: devops-actions/.github/.github/workflows/approve-dependabot-pr.yml@891fb6d59e53d81ffc7e9367de68d4ef288f2900 # main
+    uses: devops-actions/.github/.github/workflows/approve-dependabot-pr.yml@5e1e286077541a5a9a984dbd52df15ba382ca025 # main
     secrets:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index bcd4f19..6a6c433 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -12,8 +12,8 @@ jobs:
   build: # make sure build/ci work properly
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: '24'
           cache: 'npm'
@@ -24,7 +24,7 @@ jobs:
     if: github.event_name == 'pull_request'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 0d23dc9..2b64438 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -41,17 +41,17 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Setup Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: '24'
           cache: 'npm'
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v3.29.5
+        uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v3.29.5
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -64,7 +64,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v3.29.5
+        uses: github/codeql-action/autobuild@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v3.29.5
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -77,6 +77,6 @@ jobs:
       #   ./location_of_script_within_repo/buildscript.sh
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v3.29.5
+        uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v3.29.5
         with:
           category: "/language:${{matrix.language}}"
\ No newline at end of file
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index c8d5421..0973a21 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -15,7 +15,7 @@ permissions:
 
 jobs:
   dependency-review:
-    uses: devops-actions/.github/.github/workflows/dependency-review.yml@891fb6d59e53d81ffc7e9367de68d4ef288f2900 # main
+    uses: devops-actions/.github/.github/workflows/dependency-review.yml@5e1e286077541a5a9a984dbd52df15ba382ca025 # main
     permissions:
       contents: read
       pull-requests: write
diff --git a/.github/workflows/issue-pr-tag.yml b/.github/workflows/issue-pr-tag.yml
index 1d3d060..01011e9 100644
--- a/.github/workflows/issue-pr-tag.yml
+++ b/.github/workflows/issue-pr-tag.yml
@@ -14,7 +14,7 @@ on:
 
 jobs:
   notify:
-    uses: devops-actions/.github/.github/workflows/issue-pr-tag.yml@891fb6d59e53d81ffc7e9367de68d4ef288f2900 # main
+    uses: devops-actions/.github/.github/workflows/issue-pr-tag.yml@5e1e286077541a5a9a984dbd52df15ba382ca025 # main
     permissions:
       contents: read
       issues: write
diff --git a/.github/workflows/ossf-analysis.yml b/.github/workflows/ossf-analysis.yml
index 9b7d038..e1439be 100644
--- a/.github/workflows/ossf-analysis.yml
+++ b/.github/workflows/ossf-analysis.yml
@@ -15,7 +15,7 @@ permissions:
 
 jobs:
   analysis:
-    uses: devops-actions/.github/.github/workflows/rw-ossf-scorecard.yml@891fb6d59e53d81ffc7e9367de68d4ef288f2900 # main
+    uses: devops-actions/.github/.github/workflows/rw-ossf-scorecard.yml@5e1e286077541a5a9a984dbd52df15ba382ca025 # main
     permissions:
       # Needed to upload the results to code-scanning dashboard.
       security-events: write
diff --git a/.github/workflows/publishing.yml b/.github/workflows/publishing.yml
index fcaf23d..11cae3a 100644
--- a/.github/workflows/publishing.yml
+++ b/.github/workflows/publishing.yml
@@ -13,8 +13,8 @@ jobs:
   build: # make sure build/ci work properly
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: '24'
           cache: 'npm'
@@ -25,7 +25,7 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     steps: 
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       # execute the action locally for testing if anything breaks
       - uses: ./
@@ -42,10 +42,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # get code
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       # setup node
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: '24'
           cache: 'npm'
@@ -58,7 +58,7 @@ jobs:
       # get tag for this release
       - name: Get tag value
         id: tag
-        uses: devops-actions/action-get-tag@697ede5531c972e177a4e4076c347b7ceb3aeb28 # v1.0.1
+        uses: devops-actions/action-get-tag@da704151853a474681d880a37296a2f44e0d604f # v1.0.1
 
       # publish a release with the build assets
       - uses: rajbos-actions/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1
diff --git a/.github/workflows/semver-check.yml b/.github/workflows/semver-check.yml
index 628dcf1..63acbb1 100644
--- a/.github/workflows/semver-check.yml
+++ b/.github/workflows/semver-check.yml
@@ -8,7 +8,7 @@ jobs:
   semver:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
         with:
           fetch-depth: 0 # needed to get all tags
       
diff --git a/.github/workflows/testing-on-issue.yml b/.github/workflows/testing-on-issue.yml
index a5a8c68..636e4a8 100644
--- a/.github/workflows/testing-on-issue.yml
+++ b/.github/workflows/testing-on-issue.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     #if: github.ref == 'refs/heads/main' # don't run on PRs or branches
     steps: 
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v3.3.0 # this will checkout the compiled Typescript
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v3.3.0 # this will checkout the compiled Typescript
      
       #- uses: hmarr/debug-action@v2
 
diff --git a/.github/workflows/testing.yml b/.github/workflows/testing.yml
index 0319ab4..1e370b7 100644
--- a/.github/workflows/testing.yml
+++ b/.github/workflows/testing.yml
@@ -14,8 +14,8 @@ jobs:
     runs-on: ubuntu-latest
     #if: github.ref == 'refs/heads/main' # don't run on PRs
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: '24'
           cache: 'npm'
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     #if: github.ref == 'refs/heads/main' # don't run on PRs or branches
     steps: 
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v3.3.0 # this will checkout the compiled Typescript
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v3.3.0 # this will checkout the compiled Typescript
       
       #- uses: hmarr/debug-action@v2