diff --git a/.github/workflows/auto-assign.yml b/.github/workflows/auto-assign.yml
index 9c238ab..22a4c3a 100644
--- a/.github/workflows/auto-assign.yml
+++ b/.github/workflows/auto-assign.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: trailheadapps-Ubuntu
     steps:
       - name: "Auto-assign issue"
-        uses: pozil/auto-assign-issue@v2
+        uses: pozil/auto-assign-issue@v4.0.1
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           assignees: ${{ vars.DEFAULT_ISSUE_ASSIGNEE }}
diff --git a/.github/workflows/ci-pr.yml b/.github/workflows/ci-pr.yml
index 7d44512..6aa4f7c 100644
--- a/.github/workflows/ci-pr.yml
+++ b/.github/workflows/ci-pr.yml
@@ -35,16 +35,16 @@ jobs:
     steps:
       # Checkout the source code
       - name: "Checkout source code"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7.0.0
 
       # Install Volta to enforce proper node and package manager versions
       - name: "Install Volta"
-        uses: volta-cli/action@v4
+        uses: volta-cli/action@v5.0.0
 
       # Cache node_modules to speed up the process
       - name: "Restore node_modules cache"
         id: cache-npm
-        uses: actions/cache@v4
+        uses: actions/cache@v6.0.0
         with:
           path: node_modules
           key: npm-${{ hashFiles('**/package-lock.json') }}
@@ -60,7 +60,7 @@ jobs:
       # Cache React app node_modules
       - name: "Restore React app node_modules cache"
         id: cache-react-npm
-        uses: actions/cache@v4
+        uses: actions/cache@v6.0.0
         with:
           path: force-app/main/react-recipes/uiBundles/reactRecipes/node_modules
           key: react-npm-${{ hashFiles('force-app/main/react-recipes/uiBundles/reactRecipes/package-lock.json') }}
@@ -80,7 +80,7 @@ jobs:
 
       # Upload code coverage data
       - name: "Upload code coverage for React to Codecov.io"
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v7.0.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           flags: multiframework-recipes
@@ -92,7 +92,7 @@ jobs:
       # Cache Playwright browsers
       - name: "Restore Playwright browser cache"
         id: cache-playwright
-        uses: actions/cache@v4
+        uses: actions/cache@v6.0.0
         with:
           path: ~/.cache/ms-playwright
           key: playwright-${{ hashFiles('force-app/main/react-recipes/uiBundles/reactRecipes/package-lock.json') }}
@@ -139,7 +139,7 @@ jobs:
       # Run Code Analyzer
       - name: "Run Code Analyzer"
         id: run-code-analyzer
-        uses: forcedotcom/run-code-analyzer@v2
+        uses: forcedotcom/run-code-analyzer@v2.12.0
         with:
           run-arguments: --workspace "force-app/main" --view detail --output-file "sca-results.csv" --config-file "code-analyzer.yml"
           results-artifact-name: code-analyzer-results
@@ -165,7 +165,7 @@ jobs:
     steps:
       # Checkout the source code
       - name: "Checkout source code"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7.0.0
 
       # Install Salesforce CLI
       - name: "Install Salesforce CLI"
@@ -234,7 +234,7 @@ jobs:
 
       # Upload code coverage data
       - name: "Upload code coverage for Apex to Codecov.io"
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v7.0.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           flags: Apex
@@ -258,7 +258,7 @@ jobs:
     steps:
       - name: "Fetch Dependabot metadata"
         id: dependabot
-        uses: dependabot/fetch-metadata@v2
+        uses: dependabot/fetch-metadata@v3.1.0
 
       - name: "Check auto merge conditions"
         id: auto-merge
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 317cc79..ee65d4e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,16 +18,16 @@ jobs:
     steps:
       # Checkout the source code
       - name: "Checkout source code"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7.0.0
 
       # Install Volta to enforce proper node and package manager versions
       - name: "Install Volta"
-        uses: volta-cli/action@v4
+        uses: volta-cli/action@v5.0.0
 
       # Cache node_modules to speed up the process
       - name: "Restore node_modules cache"
         id: cache-npm
-        uses: actions/cache@v4
+        uses: actions/cache@v6.0.0
         with:
           path: node_modules
           key: npm-${{ hashFiles('**/package-lock.json') }}
@@ -43,7 +43,7 @@ jobs:
       # Cache React app node_modules
       - name: "Restore React app node_modules cache"
         id: cache-react-npm
-        uses: actions/cache@v4
+        uses: actions/cache@v6.0.0
         with:
           path: force-app/main/react-recipes/uiBundles/reactRecipes/node_modules
           key: react-npm-${{ hashFiles('force-app/main/react-recipes/uiBundles/reactRecipes/package-lock.json') }}
@@ -63,7 +63,7 @@ jobs:
 
       # Upload code coverage data
       - name: "Upload code coverage for React to Codecov.io"
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v7.0.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           flags: multiframework-recipes
@@ -75,7 +75,7 @@ jobs:
       # Cache Playwright browsers
       - name: "Restore Playwright browser cache"
         id: cache-playwright
-        uses: actions/cache@v4
+        uses: actions/cache@v6.0.0
         with:
           path: ~/.cache/ms-playwright
           key: playwright-${{ hashFiles('force-app/main/react-recipes/uiBundles/reactRecipes/package-lock.json') }}
@@ -122,7 +122,7 @@ jobs:
       # Run Code Analyzer
       - name: "Run Code Analyzer"
         id: run-code-analyzer
-        uses: forcedotcom/run-code-analyzer@v2
+        uses: forcedotcom/run-code-analyzer@v2.12.0
         with:
           run-arguments: --workspace "force-app/main" --view detail --output-file "sca-results.csv" --config-file "code-analyzer.yml"
           results-artifact-name: code-analyzer-results
@@ -147,7 +147,7 @@ jobs:
     steps:
       # Checkout the source code
       - name: "Checkout source code"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7.0.0
 
       # Install Salesforce CLI
       - name: "Install Salesforce CLI"
@@ -210,7 +210,7 @@ jobs:
 
       # Upload code coverage data
       - name: "Upload code coverage for Apex to Codecov.io"
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v7.0.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           flags: Apex
diff --git a/.github/workflows/codetour-watch.yml b/.github/workflows/codetour-watch.yml
index 7c9126f..d2f2cf9 100644
--- a/.github/workflows/codetour-watch.yml
+++ b/.github/workflows/codetour-watch.yml
@@ -10,10 +10,10 @@ jobs:
     if: github.actor != 'trailheadapps-bot' && github.actor != 'dependabot[bot]'
     steps:
       - name: "Checkout source code"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7.0.0
 
       - name: "Watch CodeTour changes"
-        uses: pozil/codetour-watch@v3.0.0
+        uses: pozil/codetour-watch@v4.0.0
 
   skip-codetour-watch:
     if: github.actor == 'trailheadapps-bot' || github.actor == 'dependabot[bot]'
diff --git a/.github/workflows/new-issue-welcome.yml b/.github/workflows/new-issue-welcome.yml
index e4125fd..0737e9d 100644
--- a/.github/workflows/new-issue-welcome.yml
+++ b/.github/workflows/new-issue-welcome.yml
@@ -8,7 +8,7 @@ jobs:
   comment:
     runs-on: trailheadapps-Ubuntu
     steps:
-      - uses: actions/github-script@v6
+      - uses: actions/github-script@v9.0.0
         with:
           script: |
             await github.rest.issues.createComment({
diff --git a/.github/workflows/windows-build.yml b/.github/workflows/windows-build.yml
index 6fc5d36..b83b76d 100644
--- a/.github/workflows/windows-build.yml
+++ b/.github/workflows/windows-build.yml
@@ -8,10 +8,10 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: "Checkout source code"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7.0.0
 
       - name: "Setup Node"
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v4.0.0
         with:
           node-version-file: "package.json"
           cache: npm
@@ -19,7 +19,7 @@ jobs:
 
       - name: "Restore React app node_modules cache"
         id: cache-react-npm
-        uses: actions/cache@v4
+        uses: actions/cache@v6.0.0
         with:
           path: force-app/main/react-recipes/uiBundles/reactRecipes/node_modules
           key: windows-react-npm-${{ hashFiles('force-app/main/react-recipes/uiBundles/reactRecipes/package-lock.json') }}