diff --git a/.github/workflows/build-arch-package.yml b/.github/workflows/build-arch-package.yml
index ee15a68..f47ef9b 100644
--- a/.github/workflows/build-arch-package.yml
+++ b/.github/workflows/build-arch-package.yml
@@ -41,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 120
     container:
-      image: archlinux:latest@sha256:82b1b08faae9d61e3e7e13d562f4d09114d939105b0d59ff34140f3bd418593a # renovate-container: datasource=docker depName=archlinux
+      image: archlinux:latest@sha256:b944cc65c5f28665dfd5fdbf5ed2997c88f5bb4a0aefac7ee8a7ef01893e5ed9 # renovate-container: datasource=docker depName=archlinux
     steps:
       - name: Install build tooling
         run: pacman -Syu --noconfirm --needed base-devel curl git jq sudo
diff --git a/.github/workflows/build-node-linux.yml b/.github/workflows/build-node-linux.yml
index 9ae6900..e07454f 100644
--- a/.github/workflows/build-node-linux.yml
+++ b/.github/workflows/build-node-linux.yml
@@ -60,7 +60,7 @@ jobs:
           bun-version: latest
       - name: 🍎 Install pnpm
         if: ${{ inputs.use-pnpm }}
-        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
+        uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
       - name: 🏗️ Set up Node.js (pnpm)
         if: ${{ inputs.use-pnpm }}
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
diff --git a/.github/workflows/build-pnpm.yml b/.github/workflows/build-pnpm.yml
index 622528b..12e3f1f 100644
--- a/.github/workflows/build-pnpm.yml
+++ b/.github/workflows/build-pnpm.yml
@@ -43,7 +43,7 @@ jobs:
       - name: Check out repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install pnpm
-        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
+        uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
       - name: Set up Node.js
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
diff --git a/.github/workflows/fallow.yml b/.github/workflows/fallow.yml
index e75baba..fcd55a6 100644
--- a/.github/workflows/fallow.yml
+++ b/.github/workflows/fallow.yml
@@ -26,14 +26,14 @@ jobs:
           fetch-depth: 0
       - name: Run Fallow on changed files
         if: github.event_name != 'workflow_dispatch'
-        uses: fallow-rs/fallow@79a0e8d8dbcaa408dce348b3df14fc1e824f988b # v3.22.0
+        uses: fallow-rs/fallow@c55ba1ba3c98c6e4ad48f0aed0e0f256c256d959 # v3.23.0
         with:
           root: ${{ inputs.root }}
           format: sarif
           changed-since: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before }}
       - name: Run Fallow full scan
         if: github.event_name == 'workflow_dispatch'
-        uses: fallow-rs/fallow@79a0e8d8dbcaa408dce348b3df14fc1e824f988b # v3.22.0
+        uses: fallow-rs/fallow@c55ba1ba3c98c6e4ad48f0aed0e0f256c256d959 # v3.23.0
         with:
           root: ${{ inputs.root }}
           format: sarif
diff --git a/.github/workflows/lint-eslint.yml b/.github/workflows/lint-eslint.yml
index 5ffb5bd..7090bc4 100644
--- a/.github/workflows/lint-eslint.yml
+++ b/.github/workflows/lint-eslint.yml
@@ -38,7 +38,7 @@ jobs:
           bun-version: latest
       - name: 🍎 Install pnpm
         if: ${{ inputs.use-pnpm }}
-        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
+        uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
       - name: 🏗️ Set up Node.js (pnpm)
         if: ${{ inputs.use-pnpm }}
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
diff --git a/.github/workflows/lint-prettier.yml b/.github/workflows/lint-prettier.yml
index b62e48d..7e0c1b6 100644
--- a/.github/workflows/lint-prettier.yml
+++ b/.github/workflows/lint-prettier.yml
@@ -55,7 +55,7 @@ jobs:
           bun-version: latest
       - name: 🍎 Install pnpm
         if: ${{ inputs.use-pnpm }}
-        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
+        uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
       - name: 🏗️ Set up Node.js (pnpm)
         if: ${{ inputs.use-pnpm && github.event_name == 'workflow_call' }}
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
diff --git a/.github/workflows/sync-action-bundles.yml b/.github/workflows/sync-action-bundles.yml
index 988248a..ad8f598 100644
--- a/.github/workflows/sync-action-bundles.yml
+++ b/.github/workflows/sync-action-bundles.yml
@@ -52,7 +52,7 @@ jobs:
       - name: Setup Bun
         uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
         with:
-          bun-version: "1.4.0"
+          bun-version: "1.4.2"
       - name: Install dependencies
         run: bun install --frozen-lockfile
       - name: Rebuild action bundles
diff --git a/.github/workflows/validate-actions.yml b/.github/workflows/validate-actions.yml
index 69be866..5245243 100644
--- a/.github/workflows/validate-actions.yml
+++ b/.github/workflows/validate-actions.yml
@@ -31,7 +31,7 @@ jobs:
       - name: Setup Bun
         uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
         with:
-          bun-version: "1.4.0"
+          bun-version: "1.4.2"
       - name: Install test system dependencies
         run: sudo apt-get install --yes libarchive-tools python3-packaging
       - name: Install dependencies
@@ -44,7 +44,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     container:
-      image: archlinux:latest@sha256:82b1b08faae9d61e3e7e13d562f4d09114d939105b0d59ff34140f3bd418593a # renovate-container: datasource=docker depName=archlinux
+      image: archlinux:latest@sha256:b944cc65c5f28665dfd5fdbf5ed2997c88f5bb4a0aefac7ee8a7ef01893e5ed9 # renovate-container: datasource=docker depName=archlinux
     steps:
       - name: Run foundation smoke via self-repository syntax
         id: smoke