diff --git a/.github/workflows/reusable-bump-version.yml b/.github/workflows/reusable-bump-version.yml
index 473f261..e0d9ead 100644
--- a/.github/workflows/reusable-bump-version.yml
+++ b/.github/workflows/reusable-bump-version.yml
@@ -17,7 +17,7 @@ jobs:
   bump-version:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           token: ${{ secrets.USER_TOKEN }}
@@ -98,7 +98,7 @@ jobs:
           TAG_MSG=$(jq --raw-output "${PR_TITLE_QUERY}" <<< ${PR_DATA})
           echo "TAG_MSG=${TAG_MSG}" >> $GITHUB_ENV
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         if: env.BUMP_PART != 'bumpless'
         with:
           python-version: 3.x
diff --git a/.github/workflows/reusable-changelog-check.yml b/.github/workflows/reusable-changelog-check.yml
index d1a87b9..0211f84 100644
--- a/.github/workflows/reusable-changelog-check.yml
+++ b/.github/workflows/reusable-changelog-check.yml
@@ -6,7 +6,7 @@ jobs:
     if: ${{ ! contains(github.event.pull_request.labels.*.name, 'bumpless') }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Changelog check
diff --git a/.github/workflows/reusable-docker-ecr.yml b/.github/workflows/reusable-docker-ecr.yml
index 8c7e5e2..de39d3f 100644
--- a/.github/workflows/reusable-docker-ecr.yml
+++ b/.github/workflows/reusable-docker-ecr.yml
@@ -29,7 +29,7 @@ jobs:
   dockerize:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -68,14 +68,14 @@ jobs:
 
       - name: Add test tag
         if: ${{ github.event_name != 'pull_request' && contains(inputs.version_tag, '.dev') }}
-        uses: akhilerm/tag-push-action@v2.2.0
+        uses: akhilerm/tag-push-action@v2.3.0
         with:
           src: ${{ inputs.ecr_registry }}/${{ env.REPO }}:${{ inputs.version_tag }}
           dst: ${{ inputs.ecr_registry }}/${{ env.REPO }}:test
 
       - name: Add latest tag
         if: ${{ github.event_name != 'pull_request' && ! contains(inputs.version_tag, '.dev') }}
-        uses: akhilerm/tag-push-action@v2.2.0
+        uses: akhilerm/tag-push-action@v2.3.0
         with:
           src: ${{ inputs.ecr_registry }}/${{ env.REPO }}:${{ inputs.version_tag }}
           dst: ${{ inputs.ecr_registry }}/${{ env.REPO }}:latest
diff --git a/.github/workflows/reusable-docker-ghcr.yml b/.github/workflows/reusable-docker-ghcr.yml
index 82be8c8..e870722 100644
--- a/.github/workflows/reusable-docker-ghcr.yml
+++ b/.github/workflows/reusable-docker-ghcr.yml
@@ -24,7 +24,7 @@ jobs:
   dockerize:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -61,14 +61,14 @@ jobs:
 
       - name: Add test tag
         if: ${{ github.event_name != 'pull_request' && contains(inputs.version_tag, '.dev') }}
-        uses: akhilerm/tag-push-action@v2.2.0
+        uses: akhilerm/tag-push-action@v2.3.0
         with:
           src: ghcr.io/${{ env.REPO }}:${{ inputs.version_tag }}
           dst: ghcr.io/${{ env.REPO }}:test
 
       - name: Add latest tag
         if: ${{ github.event_name != 'pull_request' && ! contains(inputs.version_tag, '.dev') }}
-        uses: akhilerm/tag-push-action@v2.2.0
+        uses: akhilerm/tag-push-action@v2.3.0
         with:
           src: ghcr.io/${{ env.REPO }}:${{ inputs.version_tag }}
           dst: ghcr.io/${{ env.REPO }}:latest
diff --git a/.github/workflows/reusable-mypy.yml b/.github/workflows/reusable-mypy.yml
index d49d882..4972b82 100644
--- a/.github/workflows/reusable-mypy.yml
+++ b/.github/workflows/reusable-mypy.yml
@@ -10,7 +10,7 @@ jobs:
   check-with-mypy:
     runs-on: ${{ inputs.runner }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: mamba-org/setup-micromamba@v3
         with:
diff --git a/.github/workflows/reusable-pypi.yml b/.github/workflows/reusable-pypi.yml
index 5e50c06..31113cc 100644
--- a/.github/workflows/reusable-pypi.yml
+++ b/.github/workflows/reusable-pypi.yml
@@ -12,12 +12,12 @@ jobs:
   distribute-to-pypi:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: "${{ inputs.python_version }}"
 
diff --git a/.github/workflows/reusable-pytest.yml b/.github/workflows/reusable-pytest.yml
index a6d5dd4..de9451f 100644
--- a/.github/workflows/reusable-pytest.yml
+++ b/.github/workflows/reusable-pytest.yml
@@ -26,7 +26,7 @@ jobs:
         python_version: ${{ fromJson(inputs.python_versions) }}
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: mamba-org/setup-micromamba@v3
         with:
diff --git a/.github/workflows/reusable-release.yml b/.github/workflows/reusable-release.yml
index b0481d2..f95be71 100644
--- a/.github/workflows/reusable-release.yml
+++ b/.github/workflows/reusable-release.yml
@@ -24,7 +24,7 @@ jobs:
   write-release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           token: ${{ secrets.USER_TOKEN }}
diff --git a/.github/workflows/reusable-ruff.yml b/.github/workflows/reusable-ruff.yml
index 31e556d..7e6de0a 100644
--- a/.github/workflows/reusable-ruff.yml
+++ b/.github/workflows/reusable-ruff.yml
@@ -10,7 +10,7 @@ jobs:
   check-with-ruff:
     runs-on: ${{ inputs.runner }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: mamba-org/setup-micromamba@v3
         with:
diff --git a/.github/workflows/reusable-secrets-analysis.yml b/.github/workflows/reusable-secrets-analysis.yml
index 1cda1f2..38baf5d 100644
--- a/.github/workflows/reusable-secrets-analysis.yml
+++ b/.github/workflows/reusable-secrets-analysis.yml
@@ -5,12 +5,12 @@ jobs:
   trufflehog:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Secret Scanning
-        uses: trufflesecurity/trufflehog@v3.95.4
+        uses: trufflesecurity/trufflehog@v3.95.9
         with:
           base: main
           extra_args: --only-verified
diff --git a/.github/workflows/reusable-version-info.yml b/.github/workflows/reusable-version-info.yml
index 261aa77..d203388 100644
--- a/.github/workflows/reusable-version-info.yml
+++ b/.github/workflows/reusable-version-info.yml
@@ -19,7 +19,7 @@ jobs:
       version: ${{ steps.set_outputs.outputs.version }}
       version_tag: ${{ steps.set_outputs.outputs.version_tag }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/update-examples.yml b/.github/workflows/update-examples.yml
index 3c8ae96..a668b73 100644
--- a/.github/workflows/update-examples.yml
+++ b/.github/workflows/update-examples.yml
@@ -15,7 +15,7 @@ jobs:
   update-actions-examples:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           token: ${{ secrets.TOOLS_BOT_PAK }}