diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 54b147e..b130048 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -19,7 +19,7 @@ jobs:
       id-token: write
     steps:
       - name: Secure runner
-        uses: tempoxyz/gh-actions/actions/secure-runner@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+        uses: tempoxyz/gh-actions/actions/secure-runner@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
 
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -32,17 +32,17 @@ jobs:
         run: echo "shortsha=$(echo "$GITHUB_SHA" | cut -c1-7)" >> "$GITHUB_OUTPUT"
 
       - name: Set up Docker Buildx
-        uses: tempoxyz/gh-actions/vendor/docker/setup-buildx-action@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+        uses: tempoxyz/gh-actions/vendor/docker/setup-buildx-action@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
 
       - name: Log in to Container Registry
-        uses: tempoxyz/gh-actions/vendor/docker/login-action@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+        uses: tempoxyz/gh-actions/vendor/docker/login-action@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push
-        uses: tempoxyz/gh-actions/vendor/docker/build-push-action@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+        uses: tempoxyz/gh-actions/vendor/docker/build-push-action@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
         with:
           context: .
           push: true
diff --git a/.github/workflows/dependency-scan.yml b/.github/workflows/dependency-scan.yml
index 5994c10..9673bd7 100644
--- a/.github/workflows/dependency-scan.yml
+++ b/.github/workflows/dependency-scan.yml
@@ -7,7 +7,7 @@ permissions: {}
 
 jobs:
   dependency-scan:
-    uses: tempoxyz/gh-actions/.github/workflows/dependency-scan.yml@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+    uses: tempoxyz/gh-actions/.github/workflows/dependency-scan.yml@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
     permissions:
       contents: read
       id-token: write
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 3ce94e8..b9cea33 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -26,18 +26,18 @@ jobs:
       id-token: write
     steps:
       - name: Secure runner
-        uses: tempoxyz/gh-actions/actions/secure-runner@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+        uses: tempoxyz/gh-actions/actions/secure-runner@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
 
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: Install system dependencies
         run: sudo apt-get update && sudo apt-get install -y libfontconfig1-dev
-      - uses: tempoxyz/gh-actions/vendor/dtolnay/rust-toolchain@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+      - uses: tempoxyz/gh-actions/vendor/dtolnay/rust-toolchain@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
         with:
           toolchain: nightly
           components: clippy
-      - uses: tempoxyz/gh-actions/vendor/Swatinem/rust-cache@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+      - uses: tempoxyz/gh-actions/vendor/Swatinem/rust-cache@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
       - name: Run clippy
         run: cargo clippy --workspace --all-targets -- -D warnings
 
@@ -50,12 +50,12 @@ jobs:
       id-token: write
     steps:
       - name: Secure runner
-        uses: tempoxyz/gh-actions/actions/secure-runner@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+        uses: tempoxyz/gh-actions/actions/secure-runner@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
 
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: tempoxyz/gh-actions/vendor/dtolnay/rust-toolchain@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+      - uses: tempoxyz/gh-actions/vendor/dtolnay/rust-toolchain@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
         with:
           toolchain: nightly
           components: rustfmt
@@ -70,13 +70,13 @@ jobs:
       id-token: write
     steps:
       - name: Secure runner
-        uses: tempoxyz/gh-actions/actions/secure-runner@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+        uses: tempoxyz/gh-actions/actions/secure-runner@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
 
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: Install system dependencies
         run: sudo apt-get update && sudo apt-get install -y libfontconfig1-dev
-      - uses: tempoxyz/gh-actions/vendor/dtolnay/rust-toolchain@1d24cba4cc91d718c9dada1c397baf11dc188fc1
-      - uses: tempoxyz/gh-actions/vendor/Swatinem/rust-cache@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+      - uses: tempoxyz/gh-actions/vendor/dtolnay/rust-toolchain@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
+      - uses: tempoxyz/gh-actions/vendor/Swatinem/rust-cache@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
       - run: cargo check --workspace --all-targets
diff --git a/.github/workflows/scan-github-actions.yml b/.github/workflows/scan-github-actions.yml
index db075af..3e67d54 100644
--- a/.github/workflows/scan-github-actions.yml
+++ b/.github/workflows/scan-github-actions.yml
@@ -8,7 +8,7 @@ permissions: {}
 jobs:
   scan:
     name: Scan GitHub Actions
-    uses: tempoxyz/gh-actions/.github/workflows/scan-github-actions.yml@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+    uses: tempoxyz/gh-actions/.github/workflows/scan-github-actions.yml@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
     permissions:
       actions: read
       contents: read
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index c5c6aba..9e22cde 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -26,15 +26,15 @@ jobs:
       id-token: write
     steps:
       - name: Secure runner
-        uses: tempoxyz/gh-actions/actions/secure-runner@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+        uses: tempoxyz/gh-actions/actions/secure-runner@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
 
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: Install system dependencies
         run: sudo apt-get update && sudo apt-get install -y libfontconfig1-dev
-      - uses: tempoxyz/gh-actions/vendor/dtolnay/rust-toolchain@1d24cba4cc91d718c9dada1c397baf11dc188fc1
-      - uses: tempoxyz/gh-actions/vendor/Swatinem/rust-cache@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+      - uses: tempoxyz/gh-actions/vendor/dtolnay/rust-toolchain@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
+      - uses: tempoxyz/gh-actions/vendor/Swatinem/rust-cache@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
       - run: cargo test --workspace
 
   decode-tx:
@@ -55,16 +55,16 @@ jobs:
             spec: tests/specs/tempo-all-types.yaml
     steps:
       - name: Secure runner
-        uses: tempoxyz/gh-actions/actions/secure-runner@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+        uses: tempoxyz/gh-actions/actions/secure-runner@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
 
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: Install system dependencies
         run: sudo apt-get update && sudo apt-get install -y libfontconfig1-dev
-      - uses: tempoxyz/gh-actions/vendor/dtolnay/rust-toolchain@1d24cba4cc91d718c9dada1c397baf11dc188fc1
-      - uses: tempoxyz/gh-actions/vendor/Swatinem/rust-cache@1d24cba4cc91d718c9dada1c397baf11dc188fc1
-      - uses: tempoxyz/gh-actions/actions/setup-foundry@1d24cba4cc91d718c9dada1c397baf11dc188fc1
+      - uses: tempoxyz/gh-actions/vendor/dtolnay/rust-toolchain@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
+      - uses: tempoxyz/gh-actions/vendor/Swatinem/rust-cache@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
+      - uses: tempoxyz/gh-actions/actions/setup-foundry@0a60d757d0f4725a34f22f7b9ebf7b91b4b00bcf
         with:
           version: nightly
       - name: Generate and decode transactions