diff --git a/.github/workflows/pull-from-crowdin.yml b/.github/workflows/pull-from-crowdin.yml
index b76da39d7..cc0cdfaf4 100644
--- a/.github/workflows/pull-from-crowdin.yml
+++ b/.github/workflows/pull-from-crowdin.yml
@@ -10,7 +10,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v6
       - name: Pull translations from Crowdin
-        uses: crowdin/github-action@08713f00a50548bfe39b37e8f44afb53e7a802d4 # v2.12.0
+        uses: crowdin/github-action@60debf382ee245b21794321190ad0501db89d8c1 # v2.13.0
         with:
           upload_sources: false
           download_translations: true
diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index 67d9eaee6..bd3dd0e46 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -44,7 +44,7 @@ jobs:
       - run: npm ci
 
       - name: upload npm logs
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         if: failure()
         with:
           name: npm-logs
@@ -75,7 +75,7 @@ jobs:
       - uses: ./.github/actions/before-install
       - run: npm ci
       - name: upload npm logs
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         if: failure()
         with:
           name: npm-logs
@@ -85,7 +85,7 @@ jobs:
 
       - name: dist cache
         if: ${{ success() }}
-        uses: actions/cache/save@v4
+        uses: actions/cache/save@v5
         with:
           path: ./dist/content-ce
           key: cache-dist-${{ github.run_id }}
@@ -107,7 +107,7 @@ jobs:
       - uses: ./.github/actions/before-install
       - run: npm ci
       - name: upload npm logs
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         if: failure()
         with:
           name: npm-logs
@@ -174,7 +174,7 @@ jobs:
             id: 19
     steps:
       - name: Free hosted runner disk space
-        uses: Alfresco/alfresco-build-tools/.github/actions/free-hosted-runner-disk-space@9e15988fdf503869a04a9106daa9b06cfdb1768c # v11.0.0
+        uses: Alfresco/alfresco-build-tools/.github/actions/free-hosted-runner-disk-space@4657bc5c89f722332e897d8f360b75f08e81b8b9 # v12.1.0
 
       - name: Checkout
         uses: actions/checkout@v6
@@ -199,7 +199,7 @@ jobs:
 
       - name: Collect and push logs as artifact
         if: always()
-        uses: Alfresco/alfresco-build-tools/.github/actions/kubectl-keep-nslogs@b51dfeef6bda4a506778050a1c0e53eed440598c # v11.0.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/kubectl-keep-nslogs@4657bc5c89f722332e897d8f360b75f08e81b8b9 # v12.1.0
         with:
           log_retention: 7
           log_name_identifier: "logs-${{ matrix.browser || 'chromium' }}-${{ matrix.e2e-suites.name }}"
@@ -211,7 +211,7 @@ jobs:
         run: npm ci
 
       - name: Restore dist cache
-        uses: actions/cache/restore@v4
+        uses: actions/cache/restore@v5
         id: cache
         with:
           path: ./dist/content-ce
@@ -267,7 +267,7 @@ jobs:
           fetch-depth: 2
 
       - name: Extract commit message
-        uses: Alfresco/alfresco-build-tools/.github/actions/get-commit-message@7eb56e49e47d11547d61c3c68826022db830fc15 #v10.1.0
+        uses: Alfresco/alfresco-build-tools/.github/actions/get-commit-message@4657bc5c89f722332e897d8f360b75f08e81b8b9 #v12.1.0
 
       - name: Check ADF link
         shell: bash
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f3944c1cd..b8fc982a2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -191,7 +191,7 @@ jobs:
       - uses: ./.github/actions/setup
         with:
           npm_tag: ${{ inputs.npm-tag }}
-      - uses: Alfresco/alfresco-build-tools/.github/actions/configure-git-author@7eb56e49e47d11547d61c3c68826022db830fc15 #v10.1.0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/configure-git-author@4657bc5c89f722332e897d8f360b75f08e81b8b9 #v12.1.0
         with:
           username: ${{ vars.BOT_GITHUB_USERNAME }}
           email: ${{ vars.BOT_GITHUB_EMAIL }}
@@ -253,7 +253,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Push Source Files to Crowdin
-        uses: crowdin/github-action@08713f00a50548bfe39b37e8f44afb53e7a802d4 # v2.12.0
+        uses: crowdin/github-action@60debf382ee245b21794321190ad0501db89d8c1 # v2.13.0
         with:
           upload_sources: true
           upload_sources_args: --delete-obsolete
diff --git a/.github/workflows/run-e2e-with-env.yml b/.github/workflows/run-e2e-with-env.yml
index 56027f58f..62eb6cf54 100644
--- a/.github/workflows/run-e2e-with-env.yml
+++ b/.github/workflows/run-e2e-with-env.yml
@@ -50,7 +50,7 @@ jobs:
 
       - name: dist cache
         if: ${{ success() }}
-        uses: actions/cache/save@v4
+        uses: actions/cache/save@v5
         with:
           path: ./dist/content-ce
           key: cache-dist-${{ github.run_id }}
@@ -118,7 +118,7 @@ jobs:
       - uses: ./.github/actions/before-install
       - run: npm ci
 
-      - uses: actions/cache/restore@v4
+      - uses: actions/cache/restore@v5
         id: cache
         with:
           path: ./dist/content-ce
diff --git a/.github/workflows/upstream-adf.yml b/.github/workflows/upstream-adf.yml
index 96d9092c8..a46783553 100644
--- a/.github/workflows/upstream-adf.yml
+++ b/.github/workflows/upstream-adf.yml
@@ -150,7 +150,7 @@ jobs:
           fi
       - name: Commit Code
         if: ${{ needs.upstream.outputs.hasNewVersion == 'true'  }}
-        uses: stefanzweifel/git-auto-commit-action@28e16e81777b558cc906c8750092100bbb34c5e3 #v6
+        uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 #v6
         with:
           commit_message: "[ci:force][auto-commit] Update dependencies ADF:${{ needs.upstream.outputs.latestADFVersion }}  JS:${{ needs.upstream.outputs.latestJSVersion }}"
           branch: upstream-dependencies