diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 3967c18a..b172edcc 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -43,7 +43,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+      uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     #   make release
 
     - name: Set up JDK ${{ matrix.java }}
-      uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
+      uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
       with:
         java-version: ${{ matrix.java }}
         distribution: 'microsoft'
@@ -78,4 +78,4 @@ jobs:
       run: ./mvnw -B verify -Dmaven.compiler.release=${{ matrix.java }} --file pom.xml 
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+      uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index c0daf4b9..94ace856 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -21,6 +21,6 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install gh-aw extension
-        uses: github/gh-aw/actions/setup-cli@466b8ad27fcfaaa861da3f16ba7c01272df25f46 # v0.87.3
+        uses: github/gh-aw/actions/setup-cli@c35393777e5604a63721d09512263b1383301d4f # v0.89.21
         with:
           version: v0.50.4
diff --git a/.github/workflows/early_access.yml b/.github/workflows/early_access.yml
index 842cc121..7231a227 100644
--- a/.github/workflows/early_access.yml
+++ b/.github/workflows/early_access.yml
@@ -15,7 +15,7 @@ jobs:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
     - name: Set up JDK 11
-      uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
+      uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
       java-version: 11
       distribution: 'microsoft'
       cache: 'maven'
diff --git a/.github/workflows/jreleaser.yml b/.github/workflows/jreleaser.yml
index 18df1cfb..61c67008 100644
--- a/.github/workflows/jreleaser.yml
+++ b/.github/workflows/jreleaser.yml
@@ -23,7 +23,7 @@ jobs:
           restore-keys: ${{ runner.os }}-m2
 
       - name: Setup Java JDK
-        uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
         with:
           java-version: '11'
           distribution: 'microsoft'
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index 11fba592..cf06498d 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -24,7 +24,7 @@ jobs:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
     - name: Set up JDK ${{ matrix.java }}
-      uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
+      uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
       with:
         java-version: ${{ matrix.java }}
         distribution: 'microsoft'
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 60296403..77b0ef63 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -23,7 +23,7 @@ jobs:
           restore-keys: ${{ runner.os }}-m2
 
       - name: Setup Java JDK
-        uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
         with:
           java-version: '11'
           distribution: 'microsoft'
diff --git a/.github/workflows/release_to_github.yml b/.github/workflows/release_to_github.yml
index 429b7d99..70d0b86d 100644
--- a/.github/workflows/release_to_github.yml
+++ b/.github/workflows/release_to_github.yml
@@ -25,7 +25,7 @@ jobs:
           restore-keys: ${{ runner.os }}-m2
 
       - name: Setup Java JDK
-        uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
         with:
           java-version: '11'
           distribution: 'microsoft'
diff --git a/.github/workflows/relevance-check.lock.yml b/.github/workflows/relevance-check.lock.yml
index 472ebb9b..08ce8b41 100644
--- a/.github/workflows/relevance-check.lock.yml
+++ b/.github/workflows/relevance-check.lock.yml
@@ -98,7 +98,7 @@ jobs:
       title: ${{ steps.sanitized.outputs.title }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@9a2569183fd5ca0d10c2fa359359b47b4c1b2a96 # v0.65.0
+        uses: github/gh-aw/actions/setup@1f75ecc37b268e2a6a94d9f1ad0163e7db6fca89 # v0.65.0
         with:
           destination: /opt/gh-aw/actions
       - name: Validate context variables
@@ -300,7 +300,7 @@ jobs:
       secret_verification_result: ${{ steps.validate-secret.outputs.verification_result }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@9a2569183fd5ca0d10c2fa359359b47b4c1b2a96 # v0.65.0
+        uses: github/gh-aw/actions/setup@1f75ecc37b268e2a6a94d9f1ad0163e7db6fca89 # v0.65.0
         with:
           destination: /opt/gh-aw/actions
       - name: Checkout repository
@@ -982,7 +982,7 @@ jobs:
       total_count: ${{ steps.missing_tool.outputs.total_count }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@9a2569183fd5ca0d10c2fa359359b47b4c1b2a96 # v0.65.0
+        uses: github/gh-aw/actions/setup@1f75ecc37b268e2a6a94d9f1ad0163e7db6fca89 # v0.65.0
         with:
           destination: /opt/gh-aw/actions
       - name: Download agent output artifact
@@ -1086,7 +1086,7 @@ jobs:
       matched_command: ${{ steps.check_command_position.outputs.matched_command }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@9a2569183fd5ca0d10c2fa359359b47b4c1b2a96 # v0.65.0
+        uses: github/gh-aw/actions/setup@1f75ecc37b268e2a6a94d9f1ad0163e7db6fca89 # v0.65.0
         with:
           destination: /opt/gh-aw/actions
       - name: Add eyes reaction for immediate feedback
@@ -1150,7 +1150,7 @@ jobs:
       process_safe_outputs_temporary_id_map: ${{ steps.process_safe_outputs.outputs.temporary_id_map }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@9a2569183fd5ca0d10c2fa359359b47b4c1b2a96 # v0.65.0
+        uses: github/gh-aw/actions/setup@1f75ecc37b268e2a6a94d9f1ad0163e7db6fca89 # v0.65.0
         with:
           destination: /opt/gh-aw/actions
       - name: Download agent output artifact
diff --git a/.github/workflows/relevance-summary.lock.yml b/.github/workflows/relevance-summary.lock.yml
index 47d488a1..dff6ee50 100644
--- a/.github/workflows/relevance-summary.lock.yml
+++ b/.github/workflows/relevance-summary.lock.yml
@@ -46,7 +46,7 @@ jobs:
       comment_repo: ""
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@9a2569183fd5ca0d10c2fa359359b47b4c1b2a96 # v0.65.0
+        uses: github/gh-aw/actions/setup@1f75ecc37b268e2a6a94d9f1ad0163e7db6fca89 # v0.65.0
         with:
           destination: /opt/gh-aw/actions
       - name: Validate context variables
@@ -225,7 +225,7 @@ jobs:
       secret_verification_result: ${{ steps.validate-secret.outputs.verification_result }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@9a2569183fd5ca0d10c2fa359359b47b4c1b2a96 # v0.65.0
+        uses: github/gh-aw/actions/setup@1f75ecc37b268e2a6a94d9f1ad0163e7db6fca89 # v0.65.0
         with:
           destination: /opt/gh-aw/actions
       - name: Checkout repository
@@ -939,7 +939,7 @@ jobs:
       total_count: ${{ steps.missing_tool.outputs.total_count }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@9a2569183fd5ca0d10c2fa359359b47b4c1b2a96 # v0.65.0
+        uses: github/gh-aw/actions/setup@1f75ecc37b268e2a6a94d9f1ad0163e7db6fca89 # v0.65.0
         with:
           destination: /opt/gh-aw/actions
       - name: Download agent output artifact
@@ -1039,7 +1039,7 @@ jobs:
       process_safe_outputs_temporary_id_map: ${{ steps.process_safe_outputs.outputs.temporary_id_map }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@9a2569183fd5ca0d10c2fa359359b47b4c1b2a96 # v0.65.0
+        uses: github/gh-aw/actions/setup@1f75ecc37b268e2a6a94d9f1ad0163e7db6fca89 # v0.65.0
         with:
           destination: /opt/gh-aw/actions
       - name: Download agent output artifact