diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
index 30c2830d9..364c21058 100644
--- a/.github/workflows/cla.yml
+++ b/.github/workflows/cla.yml
@@ -28,7 +28,7 @@ jobs:
     steps:
       - name: Generate automation token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           app-id: ${{ vars.GENERATOR_BOT_APP_ID }}
           private-key: ${{ secrets.GENERATOR_BOT_PRIVATE_KEY }}
diff --git a/.github/workflows/dependabot-go-tidy.yml b/.github/workflows/dependabot-go-tidy.yml
index 7c3429132..904032867 100644
--- a/.github/workflows/dependabot-go-tidy.yml
+++ b/.github/workflows/dependabot-go-tidy.yml
@@ -83,7 +83,7 @@ jobs:
 
             - name: Generate automation token
               id: app-token
-              uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+              uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
               with:
                 app-id: ${{ vars.GENERATOR_BOT_APP_ID }}
                 private-key: ${{ secrets.GENERATOR_BOT_PRIVATE_KEY }}
diff --git a/.github/workflows/pr-checks.yaml b/.github/workflows/pr-checks.yaml
index 83be6ec43..a290a73dd 100644
--- a/.github/workflows/pr-checks.yaml
+++ b/.github/workflows/pr-checks.yaml
@@ -21,7 +21,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 24
       - run: node --test scripts/test-snapshot-dispatch.mjs scripts/test-fork-safe-pr-workflows.mjs scripts/test-release-changelog.mjs scripts/test-release-pending.mjs
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index c50bb21ba..21aabdc47 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -23,7 +23,7 @@ jobs:
     steps:
       - name: Generate automation token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           app-id: ${{ vars.GENERATOR_BOT_APP_ID }}
           private-key: ${{ secrets.GENERATOR_BOT_PRIVATE_KEY }}
@@ -74,7 +74,7 @@ jobs:
     steps:
       - name: Generate automation token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           app-id: ${{ vars.GENERATOR_BOT_APP_ID }}
           private-key: ${{ secrets.GENERATOR_BOT_PRIVATE_KEY }}
@@ -94,7 +94,7 @@ jobs:
       - id: conventionalcommits
         if: steps.release-pending.outputs.has_commits == 'true'
         name: Conventional Commits
-        uses: TriPSs/conventional-changelog-action@ee43def3241429afddab215ba89090cbf64fb45c # v6.4.0
+        uses: TriPSs/conventional-changelog-action@469f0e5e35831fbd1962706f29f65daf0a5723f2 # v6.5.0
         with:
           github-token: ${{ steps.app-token.outputs.token }}
           skip-commit: "true"
@@ -179,7 +179,7 @@ jobs:
     steps:
       - name: Generate automation token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           app-id: ${{ vars.GENERATOR_BOT_APP_ID }}
           private-key: ${{ secrets.GENERATOR_BOT_PRIVATE_KEY }}
@@ -230,7 +230,7 @@ jobs:
     steps:
       - name: Generate automation token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           app-id: ${{ vars.GENERATOR_BOT_APP_ID }}
           private-key: ${{ secrets.GENERATOR_BOT_PRIVATE_KEY }}
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index 5e6f51fe2..46dc96439 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -15,7 +15,7 @@ jobs:
         with:
           go-version-file: "go.mod"
 
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "20"
           cache: "npm"
diff --git a/.github/workflows/snapshot-dispatch.yml b/.github/workflows/snapshot-dispatch.yml
index 2ad5ef72f..d765abfac 100644
--- a/.github/workflows/snapshot-dispatch.yml
+++ b/.github/workflows/snapshot-dispatch.yml
@@ -34,7 +34,7 @@ jobs:
     steps:
       - name: Generate automation token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           app-id: ${{ vars.GENERATOR_BOT_APP_ID }}
           private-key: ${{ secrets.GENERATOR_BOT_PRIVATE_KEY }}
diff --git a/.github/workflows/test-cli.yml b/.github/workflows/test-cli.yml
index 4f1c5f40d..7a9374608 100644
--- a/.github/workflows/test-cli.yml
+++ b/.github/workflows/test-cli.yml
@@ -35,7 +35,7 @@ jobs:
         run: ./scripts/check-generated-diff.sh
       - name: Upload test report
         if: inputs.test-group != 'review'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: sdk-cli-${{ inputs.test-group }}-test-report
           path: ./testSDKs/sdk-cli-${{ inputs.test-group }}/**/test-cli-record.txt
diff --git a/.github/workflows/test-csharp.yml b/.github/workflows/test-csharp.yml
index ddfb35ec9..01bbc5652 100644
--- a/.github/workflows/test-csharp.yml
+++ b/.github/workflows/test-csharp.yml
@@ -59,7 +59,7 @@ jobs:
         run: ./scripts/check-generated-diff.sh
       - name: Upload test report
         if: inputs.test-group != 'review'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: sdk-csharp-${{ inputs.test-group }}-test-report
           path: ./testSDKs/sdk-csharp-${{ inputs.test-group }}/**/test-csharp-record.txt
diff --git a/.github/workflows/test-go.yml b/.github/workflows/test-go.yml
index b419ec21b..dad4b78aa 100644
--- a/.github/workflows/test-go.yml
+++ b/.github/workflows/test-go.yml
@@ -36,7 +36,7 @@ jobs:
         run: ./scripts/check-generated-diff.sh
       - name: Upload test report
         if: inputs.test-group != 'review'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: sdk-go-${{ inputs.test-group }}-test-report
           path: ./testSDKs/sdk-go-${{ inputs.test-group }}/**/test-go-record.txt
diff --git a/.github/workflows/test-javav2.yml b/.github/workflows/test-javav2.yml
index a4b706311..7044ef60f 100644
--- a/.github/workflows/test-javav2.yml
+++ b/.github/workflows/test-javav2.yml
@@ -73,7 +73,7 @@ jobs:
         run: ./scripts/check-generated-diff.sh
       - name: Upload test report
         if: inputs.test-group != 'review' && (matrix.java_version == '11' || (inputs.test-group == 'security-options' && matrix.java_version == '17'))
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: sdk-javav2-${{ inputs.test-group }}-test-report
           path: ./testSDKs/sdk-javav2-${{ inputs.test-group }}/**/test-javav2-record.txt
diff --git a/.github/workflows/test-mcp-typescript.yml b/.github/workflows/test-mcp-typescript.yml
index 5e8aa0970..2be74b715 100644
--- a/.github/workflows/test-mcp-typescript.yml
+++ b/.github/workflows/test-mcp-typescript.yml
@@ -28,7 +28,7 @@ jobs:
             cmd/**/go.sum
             zSDKs/**/go.sum
             services/**/go.sum
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: ".tool-versions"
           cache: "npm"
@@ -45,7 +45,7 @@ jobs:
         run: ./scripts/check-generated-diff.sh
       - name: Upload test report
         if: inputs.test-group != 'review'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: mcp-typescript-${{ inputs.test-group }}-test-report
           path: ./testSDKs/mcp-typescript-${{ inputs.test-group }}/test-mcp-typescript-record.txt
diff --git a/.github/workflows/test-php.yml b/.github/workflows/test-php.yml
index 88a309665..2b2fd7fba 100644
--- a/.github/workflows/test-php.yml
+++ b/.github/workflows/test-php.yml
@@ -29,7 +29,7 @@ jobs:
             zSDKs/**/go.sum
             services/**/go.sum
       - name: Setup PHP
-        uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
+        uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # v2.40.0
         with:
           php-version: "8.3"
           extensions: mbstring, xml, curl
@@ -59,7 +59,7 @@ jobs:
         run: ./scripts/check-generated-diff.sh
       - name: Upload test report
         if: inputs.test-group != 'review'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: sdk-php-${{ inputs.test-group }}-test-report
           path: ./testSDKs/sdk-php-${{ inputs.test-group }}/test-php-record.txt
diff --git a/.github/workflows/test-pythonv2.yml b/.github/workflows/test-pythonv2.yml
index 97b31af4d..6dbd531ea 100644
--- a/.github/workflows/test-pythonv2.yml
+++ b/.github/workflows/test-pythonv2.yml
@@ -59,7 +59,7 @@ jobs:
         run: ./scripts/check-generated-diff.sh
       - name: Upload test report
         if: inputs.test-group != 'review' && matrix.python_version == '3.10'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: sdk-pythonv2-${{ inputs.test-group }}-test-report
           path: ./testSDKs/sdk-pythonv2-${{ inputs.test-group }}/test-python-record.txt
diff --git a/.github/workflows/test-ruby.yml b/.github/workflows/test-ruby.yml
index df03bcf87..d0c48e021 100644
--- a/.github/workflows/test-ruby.yml
+++ b/.github/workflows/test-ruby.yml
@@ -24,7 +24,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
+      - uses: ruby/setup-ruby@824c0e29fdfc7d689c191c27acc969d2d04b7dd8 # v1.331.0
         with:
           ruby-version: ${{ matrix.ruby_version }}
           bundler-cache: true # runs 'bundle install' and caches installed gems automatically
@@ -44,7 +44,7 @@ jobs:
         run: ./scripts/check-generated-diff.sh
       - name: Upload test report
         if: inputs.test-group != 'review' && matrix.ruby_version == '3.2'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: sdk-ruby-${{ inputs.test-group }}-test-report
           path: ./testSDKs/sdk-ruby-${{ inputs.test-group }}/test-ruby-record.txt
diff --git a/.github/workflows/test-typescriptv2.yml b/.github/workflows/test-typescriptv2.yml
index 20e96756e..eac657b26 100644
--- a/.github/workflows/test-typescriptv2.yml
+++ b/.github/workflows/test-typescriptv2.yml
@@ -29,7 +29,7 @@ jobs:
             zSDKs/**/go.sum
             services/**/go.sum
 
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "24"
           cache: "npm"
@@ -51,7 +51,7 @@ jobs:
         run: ./scripts/check-generated-diff.sh
       - name: Upload test report
         if: inputs.test-group != 'review'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: sdk-typescriptv2-${{ inputs.test-group }}-test-report
           path: ./testSDKs/sdk-typescriptv2-${{ inputs.test-group }}/test-typescript-record.txt
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 507b517eb..ccc04b977 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -54,12 +54,12 @@ jobs:
       - uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0
         with:
           gradle-version: "8.14"
-      - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
+      - uses: ruby/setup-ruby@824c0e29fdfc7d689c191c27acc969d2d04b7dd8 # v1.331.0
         with:
           ruby-version: "3.2"
           bundler-cache: true
       - name: Setup PHP
-        uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
+        uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # v2.40.0
         with:
           php-version: "8.3"
           extensions: mbstring, xml, curl
diff --git a/.github/workflows/typescript-lint.yml b/.github/workflows/typescript-lint.yml
index c2fd29133..dad699620 100644
--- a/.github/workflows/typescript-lint.yml
+++ b/.github/workflows/typescript-lint.yml
@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "20.x"
       - run: npm ci
@@ -50,7 +50,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "20.x"
       - run: npm ci
diff --git a/.github/workflows/wasm.yml b/.github/workflows/wasm.yml
index c5e7725c6..6f2c59a7a 100644
--- a/.github/workflows/wasm.yml
+++ b/.github/workflows/wasm.yml
@@ -25,7 +25,7 @@ jobs:
             go.sum
             cmd/**/go.sum
             zSDKs/**/go.sum
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "24"