diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7a0ce3d..fa1998d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -46,7 +46,7 @@ jobs:
         with:
           version: 11.2.2
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: 24
           cache: pnpm
@@ -96,7 +96,7 @@ jobs:
         with:
           version: 11.2.2
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: 24
           cache: pnpm
@@ -152,7 +152,7 @@ jobs:
         with:
           version: 11.2.2
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: 24
           cache: pnpm
@@ -181,7 +181,7 @@ jobs:
         with:
           version: 11.2.2
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020
         with:
           node-version: 24
           cache: pnpm
@@ -232,7 +232,7 @@ jobs:
         with:
           version: 11.2.2
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020
         with:
           node-version: 24
           cache: pnpm
diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index 3f7a44e..fa98c4f 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -33,7 +33,7 @@ jobs:
 
       - name: Run Claude Code Review
         id: claude-review
-        uses: anthropics/claude-code-action@v1.0.163
+        uses: anthropics/claude-code-action@v1.0.176
         env:
           CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
         with:
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index cdafa55..4b98cf0 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -123,7 +123,7 @@ jobs:
 
       - name: Run Claude Code
         id: claude
-        uses: anthropics/claude-code-action@v1.0.163
+        uses: anthropics/claude-code-action@v1.0.176
         env:
           CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
         with:
diff --git a/.github/workflows/cpflow-promote-staging-to-production.yml b/.github/workflows/cpflow-promote-staging-to-production.yml
index 4039df7..086d30f 100644
--- a/.github/workflows/cpflow-promote-staging-to-production.yml
+++ b/.github/workflows/cpflow-promote-staging-to-production.yml
@@ -68,7 +68,7 @@ jobs:
           persist-credentials: false
 
       - name: Checkout control-plane-flow actions
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
         with:
           repository: shakacode/control-plane-flow
           ref: v5.2.0
diff --git a/.github/workflows/demo-fleet-smoke.yml b/.github/workflows/demo-fleet-smoke.yml
index 96304e6..4ef21bf 100644
--- a/.github/workflows/demo-fleet-smoke.yml
+++ b/.github/workflows/demo-fleet-smoke.yml
@@ -17,7 +17,7 @@ concurrency:
 
 jobs:
   smoke:
-    uses: shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml@613c6c2a251a782328b26d68e7f23daa9b677497
+    uses: shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml@4d6a3bd6047057675f70949a9e50c395dd54b353
     with:
       ruby-version: "3.4.6"
       node-version: "24"