diff --git a/.github/workflows/code.ai-review.yml b/.github/workflows/code.ai-review.yml
index cd9609472..d94f85ce0 100644
--- a/.github/workflows/code.ai-review.yml
+++ b/.github/workflows/code.ai-review.yml
@@ -42,7 +42,7 @@ jobs:
     steps:
       - name: Get PR details
         id: pr
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             let pr;
@@ -70,7 +70,7 @@ jobs:
             core.setOutput('head_sha', pr.data.head.sha);
 
       - name: Clean up old AI review comments
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             // Get all PR comments
@@ -132,7 +132,7 @@ jobs:
 
       - name: React to trigger comment
         if: github.event_name == 'issue_comment'
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             await github.rest.reactions.createForIssueComment({
diff --git a/.github/workflows/code.deploy.demo.yml b/.github/workflows/code.deploy.demo.yml
index 0bf6abad1..57630bf10 100644
--- a/.github/workflows/code.deploy.demo.yml
+++ b/.github/workflows/code.deploy.demo.yml
@@ -37,7 +37,7 @@ jobs:
         with:
           python-version: "3.13"
       - name: Use Node.js 24.x
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v4
         with:
           node-version: 24.x
       - name: Install dependencies
diff --git a/.github/workflows/code.deploy.dev.yml b/.github/workflows/code.deploy.dev.yml
index 07758a9e4..f3030e8bc 100644
--- a/.github/workflows/code.deploy.dev.yml
+++ b/.github/workflows/code.deploy.dev.yml
@@ -37,7 +37,7 @@ jobs:
         with:
           python-version: "3.13"
       - name: Use Node.js 24.x
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v4
         with:
           node-version: 24.x
       - name: Install dependencies
diff --git a/.github/workflows/code.e2e-full-test.weekly.yml b/.github/workflows/code.e2e-full-test.weekly.yml
index f1675e3f4..1d88c432e 100644
--- a/.github/workflows/code.e2e-full-test.weekly.yml
+++ b/.github/workflows/code.e2e-full-test.weekly.yml
@@ -50,7 +50,7 @@ jobs:
         with:
           ref: ${{ inputs.ref || 'develop' }}
       - name: Setup Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v4
         with:
           node-version: '24'
           cache: 'npm'
@@ -66,7 +66,7 @@ jobs:
         run: npx cypress run --config-file cypress.e2e.config.ts
       - name: Archive Cypress videos & screenshots
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v4
         with:
           name: cypress-full-e2e-artifacts
           path: |
diff --git a/.github/workflows/code.end-to-end-test.nightly.yml b/.github/workflows/code.end-to-end-test.nightly.yml
index 50b6b5ef9..294f454ee 100644
--- a/.github/workflows/code.end-to-end-test.nightly.yml
+++ b/.github/workflows/code.end-to-end-test.nightly.yml
@@ -43,7 +43,7 @@ jobs:
         with:
           ref: ${{ inputs.ref || 'develop' }}
       - name: Setup Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v4
         with:
           node-version: '24'
           cache: 'npm'
@@ -64,7 +64,7 @@ jobs:
           --spec "src/e2e/specs/admin.e2e.spec.ts,src/e2e/specs/user.e2e.spec.ts,src/e2e/specs/chat.e2e.spec.ts,src/e2e/specs/bedrock-quick.e2e.spec.ts"
       - name: Archive Cypress videos & screenshots
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v4
         with:
           name: cypress-e2e-artifacts
           path: |
diff --git a/.github/workflows/code.publish.yml b/.github/workflows/code.publish.yml
index 0153dcdbb..8d5551623 100644
--- a/.github/workflows/code.publish.yml
+++ b/.github/workflows/code.publish.yml
@@ -42,7 +42,7 @@ jobs:
           df -h
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
       # Setup .npmrc file to publish to NpmJs Packages
-      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v4
         with:
           node-version: '24.x'
           registry-url: 'https://registry.npmjs.org'
@@ -88,7 +88,7 @@ jobs:
       # Upload binary assets to GitHub Release
       - name: Upload Release Assets
         if: github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && inputs.test_mode == false)
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           tag_name: ${{ github.event_name == 'release' && github.event.release.tag_name || inputs.version }}
           files: |
diff --git a/.github/workflows/code.smoke-test.yml b/.github/workflows/code.smoke-test.yml
index 3c5912071..0966c1729 100644
--- a/.github/workflows/code.smoke-test.yml
+++ b/.github/workflows/code.smoke-test.yml
@@ -17,7 +17,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
 
       - name: Setup Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v4
         with:
           node-version: '24'
           cache: 'npm'
@@ -43,7 +43,7 @@ jobs:
 
       - name: Archive Cypress videos & screenshots
         if: failure() || always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v4
         with:
           name: cypress-smoke-artifacts
           path: |
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 3db107fcc..b92342b35 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -58,7 +58,7 @@ jobs:
 
     - name: Use Node.js 24.x
       if: matrix.language == 'javascript'
-      uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v4
       with:
         node-version: 24.x
 
diff --git a/.github/workflows/docs.deploy.github-pages.yml b/.github/workflows/docs.deploy.github-pages.yml
index a22291613..03629ccae 100644
--- a/.github/workflows/docs.deploy.github-pages.yml
+++ b/.github/workflows/docs.deploy.github-pages.yml
@@ -23,12 +23,12 @@ jobs:
         with:
           fetch-depth: 0
       - name: Setup Node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v4
         with:
           node-version: 24
           cache: npm
       - name: Setup Pages
-        uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v4
+        uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v4
       - name: Install root dependencies
         run: |
           npm ci
@@ -39,7 +39,7 @@ jobs:
           CI: ""
           DOCS_BASE_PATH: '/LISA/'
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v3
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v3
         with:
           path: ./lib/docs/dist
   deploy:
@@ -52,4 +52,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
diff --git a/.github/workflows/test-and-lint.yml b/.github/workflows/test-and-lint.yml
index 46e4802a4..e8c2b5598 100644
--- a/.github/workflows/test-and-lint.yml
+++ b/.github/workflows/test-and-lint.yml
@@ -43,7 +43,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
       - name: Use Node.js 24.x
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v4
         with:
           node-version: 24.x
       - name: Install dependencies
@@ -85,7 +85,7 @@ jobs:
           with:
             python-version: '3.13'
         - name: Use Node.js 24.x
-          uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4
+          uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v4
           with:
             node-version: 24.x
         - name: Install CDK dependencies