diff --git a/.github/workflows/deployFreighterApiProduction.yml b/.github/workflows/deployFreighterApiProduction.yml
index d695005080..0fc259edf8 100644
--- a/.github/workflows/deployFreighterApiProduction.yml
+++ b/.github/workflows/deployFreighterApiProduction.yml
@@ -38,7 +38,7 @@ jobs:
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@84ae59a2cdc2258d6fa0732dd66352dddae2a412 #v7.0.9
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 #v8.1.1
         with:
           title:
             Bump @stellar/freighter-api version to ${{
diff --git a/.github/workflows/newRelease.yml b/.github/workflows/newRelease.yml
index 357c4effa8..79072ef9b2 100644
--- a/.github/workflows/newRelease.yml
+++ b/.github/workflows/newRelease.yml
@@ -197,7 +197,7 @@ jobs:
 
       - name: Open PR against release branch
         if: ${{ steps.commit_version_branch.outputs.has_changes == 'true' }}
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           APP_VERSION: ${{ steps.normalize_version.outputs.app_version }}
           RELEASE_BRANCH: ${{ steps.set_branches.outputs.release_branch }}
@@ -296,7 +296,7 @@ jobs:
         if:
           inputs.branch == 'master' &&
           steps.commit_and_push_bump_version.outputs.has_changes == 'true'
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           APP_VERSION: ${{ steps.normalize_version.outputs.app_version }}
         with:
diff --git a/.github/workflows/runIntegrationTests.yml b/.github/workflows/runIntegrationTests.yml
index 2703e51333..2ec24d8ae9 100644
--- a/.github/workflows/runIntegrationTests.yml
+++ b/.github/workflows/runIntegrationTests.yml
@@ -35,7 +35,7 @@ jobs:
       - run: yarn build:extension
       - run: yarn test:ci
       - run: yarn test:e2e
-      - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         if: ${{ !cancelled() }}
         with:
           name: playwright-report
diff --git a/.github/workflows/runTests.yml b/.github/workflows/runTests.yml
index ae8de001b6..f2cf06935e 100644
--- a/.github/workflows/runTests.yml
+++ b/.github/workflows/runTests.yml
@@ -28,7 +28,7 @@ jobs:
       - run: yarn build:extension
       - run: yarn test:ci
       - run: yarn test:e2e
-      - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         if: ${{ !cancelled() }}
         with:
           name: playwright-report
diff --git a/.github/workflows/submitProduction.yml b/.github/workflows/submitProduction.yml
index a9b223b465..fdac4ab9a3 100644
--- a/.github/workflows/submitProduction.yml
+++ b/.github/workflows/submitProduction.yml
@@ -105,12 +105,12 @@ jobs:
           target_commitish: ${{ steps.checkout_sha.outputs.sha }}
       - name: Build for Firefox
         id: web-ext-build
-        uses: kewisch/action-web-ext@fe10addf5d5e5ba6b78ffde720dd488a27d10e8c #v1
+        uses: kewisch/action-web-ext@84a13bb9e1b6108c43788ba091c41ca1dba6ad45 #v2.0
         with:
           cmd: build
           source: ./extension/build
       - name: Submit extension to Firefox
-        uses: kewisch/action-web-ext@fe10addf5d5e5ba6b78ffde720dd488a27d10e8c #v1
+        uses: kewisch/action-web-ext@84a13bb9e1b6108c43788ba091c41ca1dba6ad45 #v2.0
         with:
           cmd: sign
           source: ${{ steps.web-ext-build.outputs.target }}
@@ -127,7 +127,7 @@ jobs:
         run: zip -qq -r ./build_chrome.zip *
         working-directory: ./extension/build
       - name: Submit extension to Chrome
-        uses: mnao305/chrome-extension-upload@4008e29e13c144d0f6725462cbd49b7c291b4928 #v5.0.0
+        uses: mnao305/chrome-extension-upload@fdfe79400af990f5145a319e834aee64907ccff4 #v6.0.0
         with:
           file-path: ./extension/build/build_chrome.zip
           extension-id: "bcacfldlkkdogcmkkibnjlakofdplcbk"
diff --git a/.github/workflows/submitSafari.yml b/.github/workflows/submitSafari.yml
index aa9139e3ed..1c84c35ffd 100644
--- a/.github/workflows/submitSafari.yml
+++ b/.github/workflows/submitSafari.yml
@@ -70,7 +70,7 @@ jobs:
           xcrun safari-web-extension-converter ./extension/build
           --project-location $GYM_PROJECT --macos-only
       - name: Set up ruby env
-        uses: ruby/setup-ruby@v1.268.0
+        uses: ruby/setup-ruby@v1.310.0
         with:
           ruby-version: 2.6.10
           bundler-cache: true