diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 00000000..07b18254
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1 @@
+* @dfinity/languages
\ No newline at end of file
diff --git a/.github/mops-test-mac.yml b/.github/mops-test-mac.yml
index f66838fe..6492f340 100644
--- a/.github/mops-test-mac.yml
+++ b/.github/mops-test-mac.yml
@@ -22,17 +22,17 @@ jobs:
     name: ${{ matrix.runner }}, node ${{ matrix.node-version }}, moc ${{ matrix.moc-version }}, ${{ matrix.mops-version }}
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: oven-sh/setup-bun@v1
         with:
           bun-version: 1.2.17
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'
 
       - name: Cache mops packages
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           key: mops-packages-${{ runner.os }}-${{ hashFiles('mops.toml') }}
           restore-keys: |
diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml
index 35879c8d..681613f0 100644
--- a/.github/workflows/benchmarks.yml
+++ b/.github/workflows/benchmarks.yml
@@ -11,8 +11,8 @@ jobs:
     name: Run Benchmarks and Comment
 
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
-      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: oven-sh/setup-bun@v1
         with:
           bun-version: 1.2.17
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
diff --git a/.github/workflows/build-hash.yml b/.github/workflows/build-hash.yml
index df0ad66c..03ff7859 100644
--- a/.github/workflows/build-hash.yml
+++ b/.github/workflows/build-hash.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     name: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Set up Docker
         uses: docker/setup-docker-action@b60f85385d03ac8acfca6d9996982511d8620a19 # v4.3.0
       - name: Build using Docker
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 56a235c7..ae7a6e91 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,15 +20,17 @@ jobs:
     name: node ${{ matrix.node-version }}, moc ${{ matrix.moc-version }}, ${{ matrix.mops-version }}
 
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
-      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: oven-sh/setup-bun@v1
         with:
           bun-version: 1.2.17
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'
-      - uses: oven-sh/setup-bun@9b21598af8d4dfc302e5a30250007de0fda92acc # v1.1.1
+      - uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: 1.2.17
 
       - uses: dfinity/setup-dfx@main
 
diff --git a/.github/workflows/cli-bundle.yml b/.github/workflows/cli-bundle.yml
index ca613798..b6447a6b 100644
--- a/.github/workflows/cli-bundle.yml
+++ b/.github/workflows/cli-bundle.yml
@@ -18,8 +18,8 @@ jobs:
     name: ${{ matrix.os }}, node ${{ matrix.node-version }}
 
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
-      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: oven-sh/setup-bun@v1
         with:
           bun-version: 1.2.17
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index b48a8d06..c9adabc4 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -11,7 +11,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 20
diff --git a/.github/workflows/mops-test.yml b/.github/workflows/mops-test.yml
index 4879192c..1aebbc57 100644
--- a/.github/workflows/mops-test.yml
+++ b/.github/workflows/mops-test.yml
@@ -22,8 +22,8 @@ jobs:
     name: ${{ matrix.runner }}, node ${{ matrix.node-version }}, moc ${{ matrix.moc-version }}, ${{ matrix.mops-version }}
 
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
-      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: oven-sh/setup-bun@v1
         with:
           bun-version: 1.2.17
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
diff --git a/.github/workflows/setup-mops.yml b/.github/workflows/setup-mops.yml
index 6b6794b0..99849908 100644
--- a/.github/workflows/setup-mops.yml
+++ b/.github/workflows/setup-mops.yml
@@ -12,9 +12,9 @@ jobs:
     name: Test with ZenVoich/setup-mops
 
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - uses: dfinity/setup-dfx@main
-      - uses: ZenVoich/setup-mops@3e94e453352269b34137b5ce49f09a8df81bed7d # v1.4.1
+      - uses: dfinity/setup-mops@v1
         with:
           mops-version: 1.0.0
       - name: Run tests
diff --git a/cli/templates/mops-publish.yml b/cli/templates/mops-publish.yml
index 60bc2a30..06f96cdc 100644
--- a/cli/templates/mops-publish.yml
+++ b/cli/templates/mops-publish.yml
@@ -9,8 +9,8 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: ZenVoich/setup-mops@v1
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: dfinity/setup-mops@v1
         with:
           # Make sure you set the MOPS_IDENTITY_PEM secret in your repository settings https://docs.github.com/en/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-a-repository
           identity-pem: ${{ secrets.MOPS_IDENTITY_PEM }}
diff --git a/cli/templates/mops-test.yml b/cli/templates/mops-test.yml
index c5e2ef8f..b234dc02 100644
--- a/cli/templates/mops-test.yml
+++ b/cli/templates/mops-test.yml
@@ -12,8 +12,8 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: ZenVoich/setup-mops@v1
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: dfinity/setup-mops@v1
         with:
           mops-version: 1