diff --git a/.github/workflows/forms-cli.yml b/.github/workflows/forms-cli.yml
index 30173a365..738e2e187 100644
--- a/.github/workflows/forms-cli.yml
+++ b/.github/workflows/forms-cli.yml
@@ -25,7 +25,7 @@ jobs:
         run: |
           echo "RUBY_VERSION=$(cat ../../.ruby-version)" >> "$GITHUB_OUTPUT"
       - name: Install Ruby and gems
-        uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
+        uses: ruby/setup-ruby@e65c17d16e57e481586a6a5a0282698790062f92 # v1.300.0
         with:
           bundler-cache: true
           ruby-version: ${{steps.determine-ruby-version.outputs.RUBY_VERSION}}
diff --git a/.github/workflows/pipeline-visualiser.yml b/.github/workflows/pipeline-visualiser.yml
index 9d681a6a6..74e9094f7 100644
--- a/.github/workflows/pipeline-visualiser.yml
+++ b/.github/workflows/pipeline-visualiser.yml
@@ -35,7 +35,7 @@ jobs:
         run: |
           echo "RUBY_VERSION=$(cat ../../.ruby-version)" >> "$GITHUB_OUTPUT"
       - name: Install Ruby and gems
-        uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
+        uses: ruby/setup-ruby@e65c17d16e57e481586a6a5a0282698790062f92 # v1.300.0
         with:
           bundler-cache: true
           ruby-version: ${{steps.determine-ruby-version.outputs.RUBY_VERSION}}
diff --git a/.github/workflows/reusable-review_apps_on_pr_change.yml b/.github/workflows/reusable-review_apps_on_pr_change.yml
index 5603ba1d5..c63b72831 100644
--- a/.github/workflows/reusable-review_apps_on_pr_change.yml
+++ b/.github/workflows/reusable-review_apps_on_pr_change.yml
@@ -27,7 +27,7 @@ jobs:
           role-to-assume: arn:aws:iam::${{ inputs.aws-account-number }}:role/review-github-actions-${{ inputs.app-name }}
           aws-region: ${{ inputs.aws-region }}
       - name: Log in to Amazon ECR
-        uses: aws-actions/amazon-ecr-login@c962da2960ed15f492addc26fffa274485265950 # v2.0.2
+        uses: aws-actions/amazon-ecr-login@f2e9fc6c2b355c1890b65e6f6f0e2ac3e6e22f78 # v2.1.2
 
       - name: Checkout code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
diff --git a/.github/workflows/ruby-ci.yml b/.github/workflows/ruby-ci.yml
index 0e970afd8..14e8d9bcf 100644
--- a/.github/workflows/ruby-ci.yml
+++ b/.github/workflows/ruby-ci.yml
@@ -48,7 +48,7 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Install Ruby and gems at root
-        uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
+        uses: ruby/setup-ruby@e65c17d16e57e481586a6a5a0282698790062f92 # v1.300.0
         with:
           bundler-cache: true
           ruby-version: ${{needs.setup.outputs.ruby-version}}
@@ -73,7 +73,7 @@ jobs:
           install_args: hcl2json
 
       - name: "Install Ruby and gems in ${{matrix.spec_target}}"
-        uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
+        uses: ruby/setup-ruby@e65c17d16e57e481586a6a5a0282698790062f92 # v1.300.0
         with:
           bundler-cache: true
           ruby-version: ${{needs.setup.outputs.ruby-version}}