diff --git a/.github/workflows/kubeflow-components-test.yaml b/.github/workflows/kubeflow-components-test.yaml
index 06163aa7..5daa5803 100644
--- a/.github/workflows/kubeflow-components-test.yaml
+++ b/.github/workflows/kubeflow-components-test.yaml
@@ -32,16 +32,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3    # v4.1.0
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8    # v4.2.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5  # v4.1.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c  # v4.2.0
 
       - name: Checkout
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Check kubeflow components container build
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf    # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a    # v7.3.0
         with:
           platforms: linux/amd64,linux/arm64
           push: false
diff --git a/.github/workflows/next-container-build.yaml b/.github/workflows/next-container-build.yaml
index f67a1f97..590aedf5 100644
--- a/.github/workflows/next-container-build.yaml
+++ b/.github/workflows/next-container-build.yaml
@@ -26,13 +26,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3    # v4.1.0
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8    # v4.2.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5  # v4.1.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c  # v4.2.0
 
       - name: Login to ghcr.io
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee         # v4.2.0
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0         # v4.4.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -43,7 +43,7 @@ jobs:
 
       - name: Build and push base Kit container
         id: build-kit-container
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf    # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a    # v7.3.0
         with:
           platforms: linux/amd64,linux/arm64
           push: true
@@ -60,7 +60,7 @@ jobs:
 
       - name: Build and push Kit init container
         id: build-kit-init-container
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf    # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a    # v7.3.0
         with:
           platforms: linux/amd64,linux/arm64
           push: true
@@ -77,7 +77,7 @@ jobs:
      
       - name: Build and push Kit KServe container
         id: build-kit-serve-container
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf    # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a    # v7.3.0
         with:
           platforms: linux/amd64,linux/arm64
           push: true
@@ -94,7 +94,7 @@ jobs:
 
       - name: Build and push Kubeflow Pipeline components container
         id: build-kubeflow-container
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf    # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a    # v7.3.0
         with:
           platforms: linux/amd64,linux/arm64
           push: true
diff --git a/.github/workflows/platform-release.yaml b/.github/workflows/platform-release.yaml
index 3e06b03b..03f0935e 100644
--- a/.github/workflows/platform-release.yaml
+++ b/.github/workflows/platform-release.yaml
@@ -49,7 +49,7 @@ jobs:
           package_json_file: './docs/package.json'
 
       - name: Setup Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
             go-version-file: 'go.mod'
 
@@ -66,7 +66,7 @@ jobs:
           syft-version: v1.32.0
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 #v7.2.2
+        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 #v7.2.3
         with:
           version: latest
           distribution: goreleaser
@@ -107,7 +107,7 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Setup Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
             go-version-file: 'go.mod'
 
@@ -117,7 +117,7 @@ jobs:
           syft-version: v1.32.0
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 #v7.2.2
+        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 #v7.2.3
         with:
           version: latest
           distribution: goreleaser
@@ -141,7 +141,7 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Setup Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
             go-version-file: 'go.mod'
 
@@ -151,7 +151,7 @@ jobs:
           syft-version: v1.32.0
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 #v7.2.2
+        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 #v7.2.3
         with:
           version: latest
           distribution: goreleaser
@@ -373,13 +373,13 @@ jobs:
     needs: [release]
     steps:
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3    # v4.1.0
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8    # v4.2.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5  # v4.1.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c  # v4.2.0
 
       - name: Login to ghcr.io
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee         # v4.2.0
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0         # v4.4.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -390,7 +390,7 @@ jobs:
 
       - name: Build and push base Kit container
         id: build-kit-container
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf    # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a    # v7.3.0
         with:
           platforms: linux/amd64,linux/arm64
           push: true
@@ -408,7 +408,7 @@ jobs:
 
       - name: Build and push Kit init container
         id: build-kit-init-container
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf    # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a    # v7.3.0
         with:
           platforms: linux/amd64,linux/arm64
           push: true
@@ -426,7 +426,7 @@ jobs:
 
       - name: Build and push Kit KServe container
         id: build-kit-serve-container
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf    # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a    # v7.3.0
         with:
           platforms: linux/amd64,linux/arm64
           push: true
@@ -444,7 +444,7 @@ jobs:
 
       - name: Build and push Kubeflow Pipeline components container
         id: build-kubeflow-container
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf    # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a    # v7.3.0
         with:
           platforms: linux/amd64,linux/arm64
           push: true
@@ -461,28 +461,28 @@ jobs:
             index:org.opencontainers.image.licenses=Apache-2.0
 
       - name: Generate artifact attestation for base container
-        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32   # v4.1.0
+        uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373   # v4.1.1
         with:
           subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           subject-digest: ${{ steps.build-kit-container.outputs.digest }}
           push-to-registry: true
 
       - name: Generate artifact attestation for kit init container
-        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32   # v4.1.0
+        uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373   # v4.1.1
         with:
           subject-name: ${{ env.REGISTRY }}/${{ env.INIT_IMAGE_NAME }}
           subject-digest: ${{ steps.build-kit-init-container.outputs.digest }}
           push-to-registry: true
 
       - name: Generate artifact attestation for kit kserve container
-        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32   # v4.1.0
+        uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373   # v4.1.1
         with:
           subject-name: ${{ env.REGISTRY }}/${{ env.KIT_SERVE_IMAGE }}
           subject-digest: ${{ steps.build-kit-serve-container.outputs.digest }}
           push-to-registry: true
 
       - name: Generate artifact attestation for kubeflow container
-        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32   # v4.1.0
+        uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373   # v4.1.1
         with:
           subject-name: ${{ env.REGISTRY }}/${{ env.KUBEFLOW_IMAGE }}
           subject-digest: ${{ steps.build-kubeflow-container.outputs.digest }}
diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index 32337462..2a8af23a 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -17,7 +17,7 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Setup Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: 'go.mod'
 
@@ -106,16 +106,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3    # v4.1.0
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8    # v4.2.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5  # v4.1.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c  # v4.2.0
 
       - name: Checkout
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Check kit container build
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf    # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a    # v7.3.0
         with:
           platforms: linux/amd64,linux/arm64
           push: false
diff --git a/.github/workflows/test-container-entrypoints.yaml b/.github/workflows/test-container-entrypoints.yaml
index f053aff1..cc06ac31 100644
--- a/.github/workflows/test-container-entrypoints.yaml
+++ b/.github/workflows/test-container-entrypoints.yaml
@@ -13,7 +13,7 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Build test container
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf    # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a    # v7.3.0
         with:
           context: ./build
           file: ./build/ci/Dockerfile