diff --git a/.github/workflows/audit-api-spec.yaml b/.github/workflows/audit-api-spec.yaml
index bca2fad3d6..d7fac9193f 100644
--- a/.github/workflows/audit-api-spec.yaml
+++ b/.github/workflows/audit-api-spec.yaml
@@ -56,7 +56,7 @@ jobs:
         run: yq -P < openapi.json > openapi-head.yaml
 
       - name: Upload API spec to artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: openapi-head.yaml
           path: openapi-head.yaml
@@ -116,7 +116,7 @@ jobs:
         run: yq -P < openapi.json > openapi-merge-base.yaml
 
       - name: Upload API spec to artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: openapi-merge-base.yaml
           path: openapi-merge-base.yaml
@@ -129,12 +129,12 @@ jobs:
       specs-identical: ${{ steps.check-specs-identical.outputs.identical }}
     steps:
       - name: Download head API spec artifact
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: openapi-head.yaml
 
       - name: Download merge base API spec artifact
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: openapi-merge-base.yaml
 
@@ -161,7 +161,7 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Download head API spec artifact
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: openapi-head.yaml
 
@@ -210,12 +210,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Download head API spec artifact
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: openapi-head.yaml
 
       - name: Download merge base API spec artifact
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: openapi-merge-base.yaml
 
@@ -334,4 +334,4 @@ jobs:
             exit 1
           fi
       - name: Verify API Spec Check Passed
-        run: echo "✅ All API specification checks passed successfully!"
\ No newline at end of file
+        run: echo "✅ All API specification checks passed successfully!"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b49a3af8c0..820eedb529 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -31,13 +31,13 @@ jobs:
         with:
           mode: firewall-free
 
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0
 
       - name: Setup node:${{ matrix.node-version }}
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -56,7 +56,7 @@ jobs:
 
       - name: restore lerna dependencies
         id: lerna-cache
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 #v4.2.3
+        uses: actions/cache@v5
         with:
           path: |
             node_modules
@@ -101,18 +101,18 @@ jobs:
         with:
           mode: firewall-free
 
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Setup node 20
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@v6
         with:
           node-version: 20
 
       - name: restore lerna dependencies
         id: lerna-cache
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 #v4.2.3
+        uses: actions/cache@v5
         with:
           path: |
             node_modules
@@ -152,12 +152,12 @@ jobs:
         with:
           mode: firewall-free
 
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Setup node 20
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@v6
         with:
           node-version: 20 # this just needs to pass our lock file requirement for compilation
 
@@ -216,7 +216,7 @@ jobs:
 
       - name: restore lerna dependencies
         id: lerna-cache
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 #v4.2.3
+        uses: actions/cache@v5
         with:
           path: |
             node_modules
@@ -244,7 +244,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -316,7 +316,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -327,7 +327,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -342,18 +342,18 @@ jobs:
         with:
           mode: firewall-free
 
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Setup node 22
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@v6
         with:
           node-version: 22
 
       - name: restore lerna dependencies
         id: lerna-cache
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 #v4.2.3
+        uses: actions/cache@v5
         with:
           path: |
             node_modules
diff --git a/.github/workflows/claude-pr.yml b/.github/workflows/claude-pr.yml
index b19bfdee38..b8c906ecae 100644
--- a/.github/workflows/claude-pr.yml
+++ b/.github/workflows/claude-pr.yml
@@ -26,7 +26,7 @@ jobs:
       AWS_SESSION_TOKEN: ${{ secrets.AWS_SESSION_TOKEN }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Configure AWS Credentials (OIDC)
         uses: aws-actions/configure-aws-credentials@v5
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 362ddc8251..f6de2eeeac 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -26,10 +26,10 @@ jobs:
           mode: firewall-free
 
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+        uses: actions/checkout@v6
 
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@v6
         with:
           node-version-file: .nvmrc