diff --git a/.github/workflows/gtn-import.yml b/.github/workflows/gtn-import.yml
index e8db4cd006..44df5c8893 100644
--- a/.github/workflows/gtn-import.yml
+++ b/.github/workflows/gtn-import.yml
@@ -26,7 +26,7 @@ jobs:
           private-key: ${{ secrets.HUB_BOT_APP_PRIVATE_KEY }}
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v6.3.0
         with:
           python-version: "3.12"
 
diff --git a/.github/workflows/links-internal.yml b/.github/workflows/links-internal.yml
index 5f5da327a2..7bcba4cb51 100644
--- a/.github/workflows/links-internal.yml
+++ b/.github/workflows/links-internal.yml
@@ -16,7 +16,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v7
       - name: Setup node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: "22"
           cache: npm
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 7302e5fb5b..63361cdef3 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '22'
           cache: 'npm'
@@ -46,7 +46,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v8.3.0
+        uses: astral-sh/setup-uv@v8.3.2
         with:
           python-version: "3.12"
 
@@ -64,7 +64,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '22'
           cache: 'npm'
@@ -81,7 +81,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '22'
           cache: 'npm'
@@ -104,7 +104,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '22'
           cache: 'npm'
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a1570ace22..aa1a02aa3e 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -16,7 +16,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v7
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '22'
       - name: Install dependencies
@@ -24,7 +24,7 @@ jobs:
       - name: Build Astro site
         run: cd astro && npm run build
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v6.2.1
+        uses: aws-actions/configure-aws-credentials@6.2.2
         with:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/release-guardians-refresh.yml b/.github/workflows/release-guardians-refresh.yml
index 3bd7cbc617..0984af9895 100644
--- a/.github/workflows/release-guardians-refresh.yml
+++ b/.github/workflows/release-guardians-refresh.yml
@@ -39,7 +39,7 @@ jobs:
           token: ${{ steps.app-token.outputs.token }}
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '22'
 
diff --git a/.github/workflows/rewrites.yml b/.github/workflows/rewrites.yml
index eb2a898c65..14796e9943 100644
--- a/.github/workflows/rewrites.yml
+++ b/.github/workflows/rewrites.yml
@@ -21,7 +21,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '24'
 
@@ -38,7 +38,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v6.2.1
+        uses: aws-actions/configure-aws-credentials@6.2.2
         with:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/update-eu-citations.yml b/.github/workflows/update-eu-citations.yml
index a8adee7c00..90b87068ca 100644
--- a/.github/workflows/update-eu-citations.yml
+++ b/.github/workflows/update-eu-citations.yml
@@ -24,7 +24,7 @@ jobs:
           private-key: ${{ secrets.HUB_BOT_APP_PRIVATE_KEY }}
 
       - name: Setup Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v6.3.0
         with:
           python-version: '3.12'
 
diff --git a/.github/workflows/update-eu-genome-count.yml b/.github/workflows/update-eu-genome-count.yml
index a2c539e3e1..c3d15cf908 100644
--- a/.github/workflows/update-eu-genome-count.yml
+++ b/.github/workflows/update-eu-genome-count.yml
@@ -25,7 +25,7 @@ jobs:
           private-key: ${{ secrets.HUB_BOT_APP_PRIVATE_KEY }}
 
       - name: Setup Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v6.3.0
         with:
           python-version: "3.12"
 
diff --git a/.github/workflows/update-eu-tools.yml b/.github/workflows/update-eu-tools.yml
index dd1b628bd6..7a580fff79 100644
--- a/.github/workflows/update-eu-tools.yml
+++ b/.github/workflows/update-eu-tools.yml
@@ -24,7 +24,7 @@ jobs:
           private-key: ${{ secrets.HUB_BOT_APP_PRIVATE_KEY }}
 
       - name: Setup Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v6.3.0
         with:
           python-version: '3.12'