diff --git a/.github/workflows/code-quality-js.yml b/.github/workflows/code-quality-js.yml
index e45a38a..b7da9c9 100644
--- a/.github/workflows/code-quality-js.yml
+++ b/.github/workflows/code-quality-js.yml
@@ -21,12 +21,12 @@ jobs:
 
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
 
-            -   uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+            -   uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
                 with:
                     node-version-file: ".nvmrc"
                     registry-url: "https://registry.npmjs.org"
diff --git a/.github/workflows/code-quality-php.yml b/.github/workflows/code-quality-php.yml
index 544f6e3..2260863 100644
--- a/.github/workflows/code-quality-php.yml
+++ b/.github/workflows/code-quality-php.yml
@@ -25,13 +25,13 @@ jobs:
 
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
 
             -   name: Setup PHP and tools
-                uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
                 with:
                     php-version: ${{ matrix.php }}
                     tools: composer:v2, cs2pr, phpcs
diff --git a/.github/workflows/composer-diff.yml b/.github/workflows/composer-diff.yml
index 84d5574..72f307e 100644
--- a/.github/workflows/composer-diff.yml
+++ b/.github/workflows/composer-diff.yml
@@ -22,14 +22,14 @@ jobs:
             pull-requests: write  # Required to post the diff as a sticky comment
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
                 with:
                     fetch-depth: 0 # Required for IonBazan/composer-diff-action
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
 
             -   name: Setup PHP and tools
-                uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
                 with:
                     php-version: 8.3
                     tools: composer:v2
@@ -39,10 +39,10 @@ jobs:
 
             -   name: Generate composer.lock diff
                 id: composer-diff
-                uses: IonBazan/composer-diff-action@3140157575f6a67799cc80248ae35f5fb303ab15 # v1.2.0
+                uses: IonBazan/composer-diff-action@e2022e8718d05cc6e4e5990a06fc928c75837f76 # v2.0.0
 
             -   name: Post diff as sticky comment
-                uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
+                uses: marocchino/sticky-pull-request-comment@5770ad5eb8f42dd2c4f34da00c94c5381e49af88 # v3.0.5
                 # An empty diff result will break this action.
                 if: ${{ steps.composer-diff.outputs.composer_diff_exit_code != 0 }}
                 with:
diff --git a/.github/workflows/example-plugin.yml b/.github/workflows/example-plugin.yml
index 184f099..f81a779 100644
--- a/.github/workflows/example-plugin.yml
+++ b/.github/workflows/example-plugin.yml
@@ -18,13 +18,13 @@ jobs:
             contents: write  # Required to upload assets to the GitHub release
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
 
             -   name: Setup Node.js
-                uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+                uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
                 with:
                     node-version-file: '.nvmrc'
                     package-manager-cache: false # Prevent cache poisoning.
@@ -40,7 +40,7 @@ jobs:
                 run: npm ci
 
             -   name: Setup PHP and tools
-                uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
                 with:
                     php-version: 8.3
                     tools: composer:v2
diff --git a/.github/workflows/npm-package.yml b/.github/workflows/npm-package.yml
index 02f7951..f80c704 100644
--- a/.github/workflows/npm-package.yml
+++ b/.github/workflows/npm-package.yml
@@ -15,12 +15,12 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
 
-            -   uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+            -   uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
                 with:
                     node-version-file: ".nvmrc"
                     package-manager-cache: false # Prevent cache poisoning.
diff --git a/.github/workflows/php-package.yml b/.github/workflows/php-package.yml
index f3c0818..317fd10 100644
--- a/.github/workflows/php-package.yml
+++ b/.github/workflows/php-package.yml
@@ -17,13 +17,13 @@ jobs:
             contents: write  # Required to upload assets to the GitHub release
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
 
             -   name: Setup PHP and tools
-                uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
                 with:
                     php-version: 8.1
                     tools: composer:v2