diff --git a/.github/workflows/auto-assign.yml b/.github/workflows/auto-assign.yml
index 7dbaf7c..cffd132 100644
--- a/.github/workflows/auto-assign.yml
+++ b/.github/workflows/auto-assign.yml
@@ -9,7 +9,7 @@ jobs:
         runs-on: trailheadapps-Ubuntu
         steps:
             - name: 'Auto-assign issue'
-              uses: pozil/auto-assign-issue@v2
+              uses: pozil/auto-assign-issue@v4.0.1
               with:
                   repo-token: ${{ secrets.GITHUB_TOKEN }}
                   assignees: ${{ vars.DEFAULT_ISSUE_ASSIGNEE }}
diff --git a/.github/workflows/ci-pr.yml b/.github/workflows/ci-pr.yml
index 6e5c5d5..4fd4ac7 100644
--- a/.github/workflows/ci-pr.yml
+++ b/.github/workflows/ci-pr.yml
@@ -35,7 +35,7 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
 
             # Check for hardcoded username in XP cloud config
             - name: 'Check for hardcoded username in XP cloud config'
@@ -52,12 +52,12 @@ jobs:
 
             # Install Volta to enforce proper node and package manager versions
             - name: 'Install Volta'
-              uses: volta-cli/action@v4
+              uses: volta-cli/action@v5.0.0
 
             # Cache node_modules to speed up the process
             - name: 'Restore node_modules cache'
               id: cache-npm
-              uses: actions/cache@v4
+              uses: actions/cache@v6.0.0
               with:
                   path: node_modules
                   key: npm-${{ hashFiles('**/package-lock.json') }}
@@ -90,7 +90,7 @@ jobs:
             # Run Code Analyzer
             - name: 'Run Code Analyzer'
               id: run-code-analyzer
-              uses: forcedotcom/run-code-analyzer@v2
+              uses: forcedotcom/run-code-analyzer@v2.12.0
               with:
                   run-arguments: --workspace "cc-*/**" --view detail --output-file "sca-results.csv" --config-file "code-analyzer.yml"
                   results-artifact-name: code-analyzer-results
@@ -112,7 +112,7 @@ jobs:
 
             # Upload code coverage data
             - name: 'Upload code coverage for LWC to Codecov.io'
-              uses: codecov/codecov-action@v4
+              uses: codecov/codecov-action@v7.0.0
               with:
                   token: ${{ secrets.CODECOV_TOKEN }}
                   flags: LWC
@@ -131,7 +131,7 @@ jobs:
         steps:
             - name: 'Fetch Dependabot metadata'
               id: dependabot
-              uses: dependabot/fetch-metadata@v2
+              uses: dependabot/fetch-metadata@v3.1.0
 
             - name: 'Check auto merge conditions'
               id: auto-merge
@@ -161,7 +161,7 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
 
             # Install Salesforce CLI
             - name: 'Install Salesforce CLI'
@@ -236,7 +236,7 @@ jobs:
 
             # Upload code coverage data
             - name: 'Upload code coverage for Apex to Codecov.io'
-              uses: codecov/codecov-action@v4
+              uses: codecov/codecov-action@v7.0.0
               with:
                   token: ${{ secrets.CODECOV_TOKEN }}
                   flags: Apex
@@ -345,7 +345,7 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
 
             # Check for package changes using git diff
             - name: 'Check for package changes'
@@ -367,7 +367,7 @@ jobs:
 
             # Trigger packaging PR workflow
             - name: 'Trigger packaging PR workflow if needed'
-              uses: peter-evans/repository-dispatch@v3
+              uses: peter-evans/repository-dispatch@v4.0.1
               if: steps.checkForChanges.outputs.hasChanges == 'true'
               with:
                   token: ${{ secrets.BOT_ACCESS_TOKEN }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5adfae1..7134f3d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
 
             # Check for hardcoded username in XP cloud config
             - name: 'Check for hardcoded username in XP cloud config'
@@ -35,12 +35,12 @@ jobs:
 
             # Install Volta to enforce proper node and package manager versions
             - name: 'Install Volta'
-              uses: volta-cli/action@v4
+              uses: volta-cli/action@v5.0.0
 
             # Cache node_modules to speed up the process
             - name: 'Restore node_modules cache'
               id: cache-npm
-              uses: actions/cache@v4
+              uses: actions/cache@v6.0.0
               with:
                   path: node_modules
                   key: npm-${{ hashFiles('**/package-lock.json') }}
@@ -73,7 +73,7 @@ jobs:
             # Run Code Analyzer
             - name: 'Run Code Analyzer'
               id: run-code-analyzer
-              uses: forcedotcom/run-code-analyzer@v2
+              uses: forcedotcom/run-code-analyzer@v2.12.0
               with:
                   run-arguments: --workspace "cc-*/**" --view detail --output-file "sca-results.csv" --config-file "code-analyzer.yml"
                   results-artifact-name: code-analyzer-results
@@ -95,7 +95,7 @@ jobs:
 
             # Upload code coverage data
             - name: 'Upload code coverage for LWC to Codecov.io'
-              uses: codecov/codecov-action@v4
+              uses: codecov/codecov-action@v7.0.0
               with:
                   token: ${{ secrets.CODECOV_TOKEN }}
                   flags: LWC
@@ -107,7 +107,7 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
 
             # Install Salesforce CLI
             - name: 'Install Salesforce CLI'
@@ -176,7 +176,7 @@ jobs:
 
             # Upload code coverage data
             - name: 'Upload code coverage for Apex to Codecov.io'
-              uses: codecov/codecov-action@v4
+              uses: codecov/codecov-action@v7.0.0
               with:
                   token: ${{ secrets.CODECOV_TOKEN }}
                   flags: Apex
@@ -285,7 +285,7 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
 
             # Check for package changes using git diff
             - name: 'Check for package changes'
@@ -307,7 +307,7 @@ jobs:
 
             # Trigger packaging workflow if needed
             - name: 'Trigger packaging workflow if needed'
-              uses: peter-evans/repository-dispatch@v3
+              uses: peter-evans/repository-dispatch@v4.0.1
               if: steps.checkForChanges.outputs.hasBasePackageChanges == 'true' || steps.checkForChanges.outputs.hasSitePackageChanges == 'true'
               with:
                   token: ${{ secrets.BOT_ACCESS_TOKEN }}
diff --git a/.github/workflows/new-issue-welcome.yml b/.github/workflows/new-issue-welcome.yml
index d91afa0..4a663ec 100644
--- a/.github/workflows/new-issue-welcome.yml
+++ b/.github/workflows/new-issue-welcome.yml
@@ -8,7 +8,7 @@ jobs:
     comment:
         runs-on: trailheadapps-Ubuntu
         steps:
-            - uses: actions/github-script@v6
+            - uses: actions/github-script@v9.0.0
               with:
                   script: |
                       await github.rest.issues.createComment({
diff --git a/.github/workflows/packaging-pr.yml b/.github/workflows/packaging-pr.yml
index 9a62e46..b5a9848 100644
--- a/.github/workflows/packaging-pr.yml
+++ b/.github/workflows/packaging-pr.yml
@@ -44,7 +44,7 @@ jobs:
 
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
 
             # Store secret for dev hub
             - name: 'Populate auth file with DEVHUB_SFDX_URL secret'
diff --git a/.github/workflows/packaging.yml b/.github/workflows/packaging.yml
index 6dc35d6..6d88456 100644
--- a/.github/workflows/packaging.yml
+++ b/.github/workflows/packaging.yml
@@ -38,7 +38,7 @@ jobs:
 
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
               with:
                   ref: ${{ github.event.client_payload.ref }}
 
@@ -201,7 +201,7 @@ jobs:
             # Create PR for new package versions
             - name: 'Create PR for new package versions'
               id: create-pr
-              uses: peter-evans/create-pull-request@v6
+              uses: peter-evans/create-pull-request@v8.1.1
               with:
                   title: ${{ steps.prepare-pr.outputs.title }}
                   body: ${{ steps.prepare-pr.outputs.body }}