diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 72e55082c..ff4f2bfd5 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -34,7 +34,7 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3
+        uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3
         with:
           languages: ${{ matrix.language }}
           queries: +security-and-quality
@@ -43,9 +43,9 @@ jobs:
               - tests/data/**
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3
+        uses: github/codeql-action/autobuild@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3
+        uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3
         with:
           category: "/language:${{ matrix.language }}"
diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
index f6c51f6e5..4ad27ceb1 100644
--- a/.github/workflows/docker.yaml
+++ b/.github/workflows/docker.yaml
@@ -45,9 +45,9 @@ jobs:
           )"
           echo "version=$version" >> "$GITHUB_OUTPUT"
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
       - name: Build Docker image
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
         with:
           context: .
           load: true
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index e7361fdf9..c8f557361 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -175,22 +175,22 @@ jobs:
           persist-credentials: false
       - name: Docker meta
         id: docker_meta
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
         with:
           images: koxudaxi/datamodel-code-generator
           tags: |
             type=semver,pattern={{raw}}
       - name: Login to DockerHub
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+        uses: docker/login-action@c99871dec2022cc055c062a10cc1a1310835ceb4 # v4.3.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
       - name: Build Docker image for smoke test
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
         with:
           context: .
           load: true
@@ -202,7 +202,7 @@ jobs:
         with:
           image: datamodel-code-generator:smoke
       - name: Build and push
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
         with:
           push: true
           tags: ${{ steps.docker_meta.outputs.tags }}
diff --git a/.github/workflows/release-draft.yaml b/.github/workflows/release-draft.yaml
index e762aa073..4e904ab46 100644
--- a/.github/workflows/release-draft.yaml
+++ b/.github/workflows/release-draft.yaml
@@ -115,7 +115,7 @@ jobs:
       - name: Run Claude Code Analysis
         id: claude
         timeout-minutes: 10
-        uses: anthropics/claude-code-action@428971d2ecd6e3a7cb0ee0da2a3a8b33fdb3678d # v1.0.157
+        uses: anthropics/claude-code-action@769e3bdff9bb7ecfb51bad4c9cba23d6f5fc5ea5 # v1.0.163
         with:
           # OAuth authentication for Max plan subscribers
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 1db68764c..9a78b933e 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -648,7 +648,7 @@ jobs:
           UV_PYTHON_PREFERENCE: "only-managed"
       - name: Restore W3C XML Schema Test Suite
         id: cache-w3c-xsdtests
-        uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .tox/w3c-xsdtests
           key: e2e-xsdtests-7bc3365c652a322f3d762021b3879eb92dae7e30
@@ -661,7 +661,7 @@ jobs:
           git -C .tox/w3c-xsdtests checkout 7bc3365c652a322f3d762021b3879eb92dae7e30
       - name: Save W3C XML Schema Test Suite
         if: steps.cache-w3c-xsdtests.outputs.cache-hit != 'true' && steps.checkout-w3c-xsdtests.outcome == 'success'
-        uses: actions/cache/save@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .tox/w3c-xsdtests
           key: e2e-xsdtests-7bc3365c652a322f3d762021b3879eb92dae7e30
@@ -677,7 +677,7 @@ jobs:
           UV_PYTHON_PREFERENCE: "only-managed"
       - name: Restore JSON-Schema-Test-Suite
         id: cache-json-schema-test-suite
-        uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .tox/json-schema-test-suite
           key: e2e-json-schema-test-suite-fe8c2f0de2041943975932b6bf4bd882625b6cfb
@@ -690,7 +690,7 @@ jobs:
           git -C .tox/json-schema-test-suite checkout fe8c2f0de2041943975932b6bf4bd882625b6cfb
       - name: Save JSON-Schema-Test-Suite
         if: steps.cache-json-schema-test-suite.outputs.cache-hit != 'true' && steps.checkout-json-schema-test-suite.outcome == 'success'
-        uses: actions/cache/save@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .tox/json-schema-test-suite
           key: e2e-json-schema-test-suite-fe8c2f0de2041943975932b6bf4bd882625b6cfb
@@ -704,7 +704,7 @@ jobs:
           UV_PYTHON_PREFERENCE: "only-managed"
       - name: Restore AsyncAPI spec JSON Schemas
         id: cache-asyncapi-spec-json-schemas
-        uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .tox/asyncapi-spec-json-schemas
           key: e2e-asyncapi-spec-json-schemas-469c2b2bf5ed88e0cdf1e48975b93a87c710d229
@@ -717,7 +717,7 @@ jobs:
           git -C .tox/asyncapi-spec-json-schemas checkout 469c2b2bf5ed88e0cdf1e48975b93a87c710d229
       - name: Save AsyncAPI spec JSON Schemas
         if: steps.cache-asyncapi-spec-json-schemas.outputs.cache-hit != 'true' && steps.checkout-asyncapi-spec-json-schemas.outcome == 'success'
-        uses: actions/cache/save@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .tox/asyncapi-spec-json-schemas
           key: e2e-asyncapi-spec-json-schemas-469c2b2bf5ed88e0cdf1e48975b93a87c710d229
@@ -732,7 +732,7 @@ jobs:
           UV_PYTHON_PREFERENCE: "only-managed"
       - name: Restore Apache Avro
         id: cache-apache-avro
-        uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .tox/apache-avro
           key: e2e-apache-avro-9110c693767c1dde2665b2b57939333478b12036
@@ -745,7 +745,7 @@ jobs:
           git -C .tox/apache-avro checkout 9110c693767c1dde2665b2b57939333478b12036
       - name: Save Apache Avro
         if: steps.cache-apache-avro.outputs.cache-hit != 'true' && steps.checkout-apache-avro.outcome == 'success'
-        uses: actions/cache/save@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .tox/apache-avro
           key: e2e-apache-avro-9110c693767c1dde2665b2b57939333478b12036
@@ -760,7 +760,7 @@ jobs:
           UV_PYTHON_PREFERENCE: "only-managed"
       - name: Restore Protocol Buffers
         id: cache-protobuf
-        uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .tox/protobuf
           key: e2e-protobuf-4376cba55d9e2f44f7e317d9c10e0259d145f8cf
@@ -775,7 +775,7 @@ jobs:
           git -C .tox/protobuf checkout 4376cba55d9e2f44f7e317d9c10e0259d145f8cf
       - name: Save Protocol Buffers
         if: steps.cache-protobuf.outputs.cache-hit != 'true' && steps.checkout-protobuf.outcome == 'success'
-        uses: actions/cache/save@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .tox/protobuf
           key: e2e-protobuf-4376cba55d9e2f44f7e317d9c10e0259d145f8cf
diff --git a/action.yml b/action.yml
index 408fbaa5c..2996f0bd2 100644
--- a/action.yml
+++ b/action.yml
@@ -108,7 +108,7 @@ runs:
         } >> "$GITHUB_OUTPUT"
       shell: bash
 
-    - uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+    - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       with:
         path: ~/.cache/pip
         key: datamodel-codegen-${{ runner.os }}-python-3.14-${{ steps.install-package.outputs.cache-key }}