diff --git a/.github/workflows/build-actions-runner.yaml b/.github/workflows/build-actions-runner.yaml
index 0dd18fc4d..c944e9ec3 100644
--- a/.github/workflows/build-actions-runner.yaml
+++ b/.github/workflows/build-actions-runner.yaml
@@ -39,7 +39,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/build-mdq.yml b/.github/workflows/build-mdq.yml
index 2bf27a08e..aaea6883e 100644
--- a/.github/workflows/build-mdq.yml
+++ b/.github/workflows/build-mdq.yml
@@ -40,7 +40,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/flux-diff.yml b/.github/workflows/flux-diff.yml
index dd5d23812..505e05ad8 100644
--- a/.github/workflows/flux-diff.yml
+++ b/.github/workflows/flux-diff.yml
@@ -15,12 +15,12 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
 
       - name: Setup flate
-        uses: home-operations/flate/action@0fc37fae10cf3c265294f6adebc6d6c100c74ea5 # v0.4.10
+        uses: home-operations/flate/action@bf3405a189626478b0aa6ec98dc4d6f7d419df17 # v0.4.12
         with:
           base: "origin/${{ github.event.pull_request.base.ref }}"
           cache: true
diff --git a/.github/workflows/multi-runner-build.yml b/.github/workflows/multi-runner-build.yml
index 87676a8ab..c4584becb 100644
--- a/.github/workflows/multi-runner-build.yml
+++ b/.github/workflows/multi-runner-build.yml
@@ -92,7 +92,7 @@ jobs:
         include: ${{ fromJson(needs.matrix.outputs.matrix) }}
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
           token: ${{ secrets.GITHUB_APP_TOKEN || github.token }}
diff --git a/.github/workflows/outline-role-sync.yml b/.github/workflows/outline-role-sync.yml
index 49ddb946d..52043a5b6 100644
--- a/.github/workflows/outline-role-sync.yml
+++ b/.github/workflows/outline-role-sync.yml
@@ -43,7 +43,7 @@ jobs:
         working-directory: ./services/outline-role-sync
     steps:
       - name: Checkout code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/scripts.yml b/.github/workflows/scripts.yml
index 3e1cdb57e..b7f827e43 100644
--- a/.github/workflows/scripts.yml
+++ b/.github/workflows/scripts.yml
@@ -43,7 +43,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/shared-zizmor.yml b/.github/workflows/shared-zizmor.yml
index 2a8f685c2..36f098554 100644
--- a/.github/workflows/shared-zizmor.yml
+++ b/.github/workflows/shared-zizmor.yml
@@ -18,7 +18,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/terragrunt.yml b/.github/workflows/terragrunt.yml
index a77f76513..9345c6dfb 100644
--- a/.github/workflows/terragrunt.yml
+++ b/.github/workflows/terragrunt.yml
@@ -54,7 +54,7 @@ jobs:
       contents: read
     steps:
       - name: 'Checkout'
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -71,7 +71,7 @@ jobs:
           permission-contents: read
 
       - name: Setup Mise
-        uses: immich-app/devtools/actions/use-mise@3bca63ca3c15020293b36b51737a3ee2c773340b # use-mise-action-v3.1.0
+        uses: immich-app/devtools/actions/use-mise@4d97fb30d9edd3ff0d735f411f607a35204eea79 # use-mise-action-v3.2.0
         with:
           github_token: ${{ steps.token.outputs.token }}
 
@@ -93,7 +93,7 @@ jobs:
       pull-requests: write
     steps:
       - name: 'Checkout'
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -110,7 +110,7 @@ jobs:
           permission-contents: read
 
       - name: Setup Mise
-        uses: immich-app/devtools/actions/use-mise@3bca63ca3c15020293b36b51737a3ee2c773340b # use-mise-action-v3.1.0
+        uses: immich-app/devtools/actions/use-mise@4d97fb30d9edd3ff0d735f411f607a35204eea79 # use-mise-action-v3.2.0
         with:
           github_token: ${{ steps.token.outputs.token }}
 
@@ -224,7 +224,7 @@ jobs:
       contents: read
     steps:
       - name: 'Checkout'
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -241,7 +241,7 @@ jobs:
           permission-contents: read
 
       - name: Setup Mise
-        uses: immich-app/devtools/actions/use-mise@3bca63ca3c15020293b36b51737a3ee2c773340b # use-mise-action-v3.1.0
+        uses: immich-app/devtools/actions/use-mise@4d97fb30d9edd3ff0d735f411f607a35204eea79 # use-mise-action-v3.2.0
         with:
           github_token: ${{ steps.token.outputs.token }}
 
diff --git a/.github/workflows/test-sticky-comment.yml b/.github/workflows/test-sticky-comment.yml
index 51e9d3251..1885c8364 100644
--- a/.github/workflows/test-sticky-comment.yml
+++ b/.github/workflows/test-sticky-comment.yml
@@ -40,7 +40,7 @@ jobs:
         working-directory: ./actions/sticky-comment
     steps:
       - name: Checkout code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
@@ -71,7 +71,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/test-use-mise.yml b/.github/workflows/test-use-mise.yml
index 3f3a3d5db..52d4b63ff 100644
--- a/.github/workflows/test-use-mise.yml
+++ b/.github/workflows/test-use-mise.yml
@@ -51,7 +51,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/zitadel-actions.yml b/.github/workflows/zitadel-actions.yml
index 77db2ffe7..e3634ae77 100644
--- a/.github/workflows/zitadel-actions.yml
+++ b/.github/workflows/zitadel-actions.yml
@@ -43,7 +43,7 @@ jobs:
         working-directory: ./services/zitadel-actions
     steps:
       - name: Checkout code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/actions/pre-job/action.yml b/actions/pre-job/action.yml
index 0765bf9cb..36377004d 100644
--- a/actions/pre-job/action.yml
+++ b/actions/pre-job/action.yml
@@ -190,7 +190,7 @@ runs:
 
     - name: Checkout code
       if: ${{ steps.check-conditions.outputs.needs_path_filtering == 'true' }}
-      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         persist-credentials: false
         token: ${{ inputs.github-token }}
diff --git a/actions/use-mise/action.yml b/actions/use-mise/action.yml
index adf016815..2bd18a5c3 100644
--- a/actions/use-mise/action.yml
+++ b/actions/use-mise/action.yml
@@ -15,4 +15,4 @@ runs:
         github_token: ${{ inputs.github_token }}
         working_directory: ${{ inputs.working_directory }}
         install_args: "--locked"
-        version: 2026.7.7
+        version: 2026.7.11