diff --git a/.github/actions/deploy/action.yml b/.github/actions/deploy/action.yml
index bb520727..b16b556d 100644
--- a/.github/actions/deploy/action.yml
+++ b/.github/actions/deploy/action.yml
@@ -79,9 +79,9 @@ runs:
   using: composite
   steps:
   - name: Checkout this repo
-    uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+    uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
   - name: Check out source repository
-    uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+    uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     with:
       repository: ${{ inputs.source_repository }}
       path: source
@@ -111,7 +111,7 @@ runs:
     run: |
       docker context use builders || docker context create builders
   - name: Set up Docker Buildx
-    uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
+    uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
     with:
       endpoint: builders
   - name: Unlock MacOS keychain for Docker Hub login
@@ -120,7 +120,7 @@ runs:
     run: |
       security -v unlock-keychain -p ${{ inputs.MACOS_PASSWORD }} ~/Library/Keychains/login.keychain-db
   - name: Login to Docker Hub
-    uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+    uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
     with:
       username: ${{ inputs.DOCKER_USERNAME }}
       password: ${{ inputs.DOCKER_PASSWORD }}
@@ -128,7 +128,7 @@ runs:
     if: ${{ inputs.harbor_registry != '' }}
     id: harbor_login
     continue-on-error: true
-    uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+    uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
     with:
       registry: ${{ inputs.harbor_registry }}
       username: ${{ inputs.HARBOR_USERNAME }}
@@ -178,7 +178,7 @@ runs:
   - name: Docker build & push
     if: ${{ inputs.build_script == '' }}
     id: docker_build
-    uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
+    uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
     with:
       context: ./source
       file: ${{ inputs.target_dockerfile }}
diff --git a/.github/actions/install-deps/action.yml b/.github/actions/install-deps/action.yml
index 2fe14edd..b511ea23 100644
--- a/.github/actions/install-deps/action.yml
+++ b/.github/actions/install-deps/action.yml
@@ -11,23 +11,23 @@ runs:
   using: composite
   steps:
   - name: Checkout this repo
-    uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-  - uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
+    uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+  - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
     if: contains(inputs.repository, 'teku')
     with:
       distribution: 'temurin'
       java-version: '21'
-  - uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
+  - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
     if: contains(inputs.repository, 'besu')
     with:
       distribution: 'temurin'
       java-version: '21'
-  - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
+  - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
     if: contains(inputs.repository, 'lodestar') || contains(inputs.repository, 'ethereumjs')
     with:
       node-version: 20
       check-latest: true
-  - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+  - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
     if: contains(inputs.repository, 'prysm')
     with:
       go-version: '1.23.0'
diff --git a/.github/actions/manifest/action.yml b/.github/actions/manifest/action.yml
index 34f7b9ee..0f23a302 100644
--- a/.github/actions/manifest/action.yml
+++ b/.github/actions/manifest/action.yml
@@ -44,7 +44,7 @@ runs:
   using: composite
   steps:
   - name: Checkout this repo
-    uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+    uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
   - name: Generate images list
     id: generate_images_list
     shell: bash
@@ -90,11 +90,11 @@ runs:
     run: |
       docker context create builders
   - name: Set up Docker Buildx
-    uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
+    uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
     with:
       endpoint: builders
   - name: Login to Docker Hub
-    uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+    uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
     with:
       username: ${{ inputs.DOCKER_USERNAME }}
       password: ${{ inputs.DOCKER_PASSWORD }}
@@ -102,7 +102,7 @@ runs:
     if: ${{ inputs.harbor_registry != '' }}
     id: harbor_login
     continue-on-error: true
-    uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+    uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
     with:
       registry: ${{ inputs.harbor_registry }}
       username: ${{ inputs.HARBOR_USERNAME }}
diff --git a/.github/workflows/scheduled.yml b/.github/workflows/scheduled.yml
index afffe376..8e6592b9 100644
--- a/.github/workflows/scheduled.yml
+++ b/.github/workflows/scheduled.yml
@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: mikefarah/yq@5a7e72a743649b1b3a47d1a1d8214f3453173c51 # v4.52.4
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: '3.10'
       - name: Install dependencies
@@ -30,7 +30,7 @@ jobs:
           python generate_config.py
           echo "Generated config.yaml for workflow use"
       - name: Login to Docker Hub
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           username: ${{ vars.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}