diff --git a/.github/workflows/__main-ci.yml b/.github/workflows/__main-ci.yml
index 180efb9d..8d62b9ac 100644
--- a/.github/workflows/__main-ci.yml
+++ b/.github/workflows/__main-ci.yml
@@ -83,7 +83,7 @@ jobs:
   release:
     needs: ci
     if: github.event_name != 'schedule'
-    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@dbdcce2870b33525ac1fa26069bf95b2dd586fda # 0.15.2
+    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@ed864a88ec8610dc2a1b9aab1dbde2864bf75df4 # 0.16.0
     permissions:
       contents: read
     with:
diff --git a/actions/helm/generate-docs/action.yml b/actions/helm/generate-docs/action.yml
index 3952f485..877ff86b 100644
--- a/actions/helm/generate-docs/action.yml
+++ b/actions/helm/generate-docs/action.yml
@@ -142,7 +142,7 @@ runs:
         working-directory: ${{ steps.prepare-variables.outputs.working-directory }}
 
     - name: Setup Node.js
-      uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@ce2bb8274a37c1219be2bcae2a1b2528c2c72957 # 0.19.0
+      uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@ce2467e5d41ff0abe85094dcc39c98288448065a # 0.20.4
       with:
         working-directory: ${{ github.action_path }}
 
diff --git a/actions/helm/release-chart/action.yml b/actions/helm/release-chart/action.yml
index 08cd6276..4b1fd157 100644
--- a/actions/helm/release-chart/action.yml
+++ b/actions/helm/release-chart/action.yml
@@ -175,7 +175,7 @@ runs:
 
           core.setOutput('yq-command', yqCommands.join('\n'));
 
-    - uses: mikefarah/yq@45be35c06387d692bb6bf689919919e0e32e796f # v4.49.1
+    - uses: mikefarah/yq@7ccaf8e700ce99eb3f0f6cef7f5930a0b3c827cd # v4.49.2
       with:
         cmd: |
           ${{ steps.chart-values-updates.outputs.yq-command }}
diff --git a/actions/helm/test-chart/action.yml b/actions/helm/test-chart/action.yml
index 55a3a874..72cd1305 100644
--- a/actions/helm/test-chart/action.yml
+++ b/actions/helm/test-chart/action.yml
@@ -100,7 +100,7 @@ runs:
           echo "path=ct.yaml" >> "$GITHUB_OUTPUT"
         fi
 
-    - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
+    - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
 
     - name: Set up chart-testing
       uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0