diff --git a/.github/workflows/build-container-reusable.yml b/.github/workflows/build-container-reusable.yml
index 8ad1a61f5..425a0f9bd 100644
--- a/.github/workflows/build-container-reusable.yml
+++ b/.github/workflows/build-container-reusable.yml
@@ -44,7 +44,7 @@ jobs:
           persist-credentials: false
       - name: Install task runner
         id: mise
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install: false
@@ -55,20 +55,20 @@ jobs:
           dotnet-version: 10.0.x
         if: ${{ inputs.mode != 'test-only' }}
       - name: Setup QEMU
-        uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
+        uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
         if: ${{ inputs.mode != 'test-only' }}
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
         if: ${{ inputs.mode != 'test-only' }}
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
+        uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
         if: ${{ inputs.mode != 'test-only' }}
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Build
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
         if: ${{ inputs.mode != 'test-only' }}
         with:
           context: .
@@ -88,7 +88,7 @@ jobs:
         if: ${{ inputs.mode != 'test-only' }}
         run: mise run --skip-tools github:actions:container -- verify
       - name: Build Test Container
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
         if: ${{ inputs.mode != 'test-only' }}
         with:
           context: .
@@ -109,7 +109,7 @@ jobs:
         if: ${{ inputs.mode == 'build-only' }}
         run: mise run --skip-tools github:actions:container -- export-runtime
       - name: Publish Test Container
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: ${{ inputs.mode == 'build-only' }}
         with:
           name: ${{ inputs.test-image-artifact-name }}
@@ -117,7 +117,7 @@ jobs:
           if-no-files-found: error
           retention-days: 1
       - name: Publish Container
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: ${{ inputs.mode == 'build-only' }}
         with:
           name: ${{ inputs.image-artifact-name }}
@@ -125,7 +125,7 @@ jobs:
           if-no-files-found: error
           retention-days: 1
       - name: Download Test Container
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         if: ${{ inputs.mode == 'test-only' }}
         with:
           name: ${{ inputs.test-image-artifact-name }}
@@ -141,7 +141,7 @@ jobs:
         if: ${{ failure() && steps.mise.outcome == 'success' }}
         run: mise run --skip-tools github:actions:container -- normalize-results
       - name: Publish Test Results
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: failure()
         with:
           name: test-results-${{ inputs.container-runtime }}-${{ inputs.test-group-name }}
diff --git a/.github/workflows/build-container-ubuntu-lts.yml b/.github/workflows/build-container-ubuntu-lts.yml
index a06af21fc..8e4da4430 100644
--- a/.github/workflows/build-container-ubuntu-lts.yml
+++ b/.github/workflows/build-container-ubuntu-lts.yml
@@ -114,7 +114,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Install task runner
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install: false
@@ -147,7 +147,7 @@ jobs:
           path: .github/compatibility/clients/rust
           persist-credentials: false
       - name: Download server image
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: eventstore-image-noble-linux-x64
       - name: Load server image
@@ -157,7 +157,7 @@ jobs:
           TROGON_EVENTSTORE_COMPATIBILITY_TLS: ${{ matrix.tls }}
         run: mise run --skip-tools github:actions:client-compatibility -- run
       - name: Publish compatibility evidence
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: always()
         with:
           name: client-compatibility-${{ matrix.mode }}
@@ -198,7 +198,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Install task runner
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install: false
diff --git a/.github/workflows/build-reusable.yml b/.github/workflows/build-reusable.yml
index 3fdd85d3d..d2e2a2c85 100644
--- a/.github/workflows/build-reusable.yml
+++ b/.github/workflows/build-reusable.yml
@@ -33,7 +33,7 @@ jobs:
           dotnet-version: 10.0.x
       - name: Install task runner
         id: mise
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install_args: protoc
@@ -63,13 +63,13 @@ jobs:
         if: ${{ always() && steps.mise.outcome == 'success' }}
         run: mise run --skip-tools github:actions:dotnet-build -- collect-results
       - name: Publish Test Results (HTML)
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: always()
         with:
           path: test-results.html
           name: test-results-${{ matrix.configuration }}-${{ inputs.os }}.html
       - name: Publish Test Results (All)
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: always()
         with:
           name: test-results-${{ matrix.configuration }}-${{ inputs.os }}
diff --git a/.github/workflows/build-ubuntu-lts-arm64.yml b/.github/workflows/build-ubuntu-lts-arm64.yml
index 7dc5ec5cd..d164132e6 100644
--- a/.github/workflows/build-ubuntu-lts-arm64.yml
+++ b/.github/workflows/build-ubuntu-lts-arm64.yml
@@ -46,7 +46,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Install task runner
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install: false
diff --git a/.github/workflows/build-ubuntu-lts-x64.yml b/.github/workflows/build-ubuntu-lts-x64.yml
index 4f9f1b9e1..aaced2b5f 100644
--- a/.github/workflows/build-ubuntu-lts-x64.yml
+++ b/.github/workflows/build-ubuntu-lts-x64.yml
@@ -42,7 +42,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Install task runner
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install: false
diff --git a/.github/workflows/changes-reusable.yml b/.github/workflows/changes-reusable.yml
index ee958997e..1d3aa1419 100644
--- a/.github/workflows/changes-reusable.yml
+++ b/.github/workflows/changes-reusable.yml
@@ -23,7 +23,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Install task runner
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install: false
diff --git a/.github/workflows/common.yml b/.github/workflows/common.yml
index 36b4698b4..88df81c4a 100644
--- a/.github/workflows/common.yml
+++ b/.github/workflows/common.yml
@@ -37,7 +37,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Install repository tools
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install_args: github:open-telemetry/weaver
@@ -62,7 +62,7 @@ jobs:
         with:
           dotnet-version: 10.0.x
       - name: Install task runner
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install: false
@@ -110,7 +110,7 @@ jobs:
         with:
           dotnet-version: 10.0.x
       - name: Install task runner
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install: false
@@ -148,7 +148,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Install task runner
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install: false
@@ -192,7 +192,7 @@ jobs:
         with:
           dotnet-version: 10.0.x
       - name: Install task runner
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install: false
@@ -240,13 +240,13 @@ jobs:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install task runner
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install: false
           cache: false
       - name: Github Registry Docker Login
-        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
+        uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
         with:
           registry: docker.pkg.github.com
           username: ${{ github.actor }}
@@ -278,7 +278,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Install task runner
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install: false
diff --git a/.github/workflows/tag-docker-images.yml b/.github/workflows/tag-docker-images.yml
index 0f04f4750..d31dbdb00 100644
--- a/.github/workflows/tag-docker-images.yml
+++ b/.github/workflows/tag-docker-images.yml
@@ -17,19 +17,19 @@ jobs:
         with:
           persist-credentials: false
       - name: Install task runner
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4
         with:
           version: 2026.8.2
           install: false
           cache: false
       - name: Download Container
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: ${{ inputs.image-artifact-name }}
       - name: Load Container
         run: mise run --skip-tools github:actions:container -- load-runtime
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
+        uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}