diff --git a/.github/actions/generate-chart-matrix/action.yaml b/.github/actions/generate-chart-matrix/action.yaml
index 6b547c3abb..9f753bb768 100644
--- a/.github/actions/generate-chart-matrix/action.yaml
+++ b/.github/actions/generate-chart-matrix/action.yaml
@@ -58,7 +58,7 @@ runs:
         echo "${GITHUB_CONTEXT}"
     - name: Get changed dirs
       id: changed-files
-      uses: tj-actions/changed-files@ed68ef82c095e0d48ec87eccea555d944a631a4c # v46
+      uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47
       with:
         dir_names: "true"
     - name: Get chart versions
diff --git a/.github/actions/gke-login/action.yaml b/.github/actions/gke-login/action.yaml
index 61089838ca..5b22535fb2 100644
--- a/.github/actions/gke-login/action.yaml
+++ b/.github/actions/gke-login/action.yaml
@@ -33,7 +33,7 @@ runs:
     with:
       credentials_json: '${{ inputs.credentials-json }}'
   - name: Get GKE credentials
-    uses: google-github-actions/get-gke-credentials@64bc7249bbcf78056bb92f14d3cedc2da193946c # v2
+    uses: google-github-actions/get-gke-credentials@3da1e46a907576cefaa90c484278bb5b259dd395 # v3
     with:
       cluster_name: ${{ inputs.cluster-name }}
       location: ${{ inputs.cluster-location }}
diff --git a/.github/workflows/chart-validate-template.yaml b/.github/workflows/chart-validate-template.yaml
index 51e5861d65..dd35768353 100644
--- a/.github/workflows/chart-validate-template.yaml
+++ b/.github/workflows/chart-validate-template.yaml
@@ -50,7 +50,7 @@ jobs:
         run: |
           echo "check-version-increment: false" >> .github/config/chart-testing.yaml
       # Dependencies.
-      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+      - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
         with:
           python-version: 3.13
       - name: Cache Helm chart dependencies
diff --git a/.github/workflows/repo-pr-labeler.yaml b/.github/workflows/repo-pr-labeler.yaml
index c23d087542..9e36e11f2e 100644
--- a/.github/workflows/repo-pr-labeler.yaml
+++ b/.github/workflows/repo-pr-labeler.yaml
@@ -12,6 +12,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Run Labeler
-        uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5
+        uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6
         with:
           configuration-path: .github/config/pr-labeler.yaml
diff --git a/.github/workflows/test-integration-runner.yaml b/.github/workflows/test-integration-runner.yaml
index 82b8a537cc..91af40e1fb 100644
--- a/.github/workflows/test-integration-runner.yaml
+++ b/.github/workflows/test-integration-runner.yaml
@@ -848,7 +848,7 @@ jobs:
           repository: camunda/camunda-platform-helm
           ref: ${{ inputs.camunda-helm-git-ref }}
 
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
         with:
           node-version: lts/*