diff --git a/.github/actions/setup_build/action.yml b/.github/actions/setup_build/action.yml
index 848ad8825..466b9c85c 100644
--- a/.github/actions/setup_build/action.yml
+++ b/.github/actions/setup_build/action.yml
@@ -78,7 +78,7 @@ runs:
 
     - name: load llvm native
       if: inputs.llvm_source == 'cache'
-      uses: actions/cache/restore@v4
+      uses: actions/cache/restore@v5
       with:
         path: llvm_install/**
         key: llvm-${{ inputs.os }}-${{ steps.set_llvm_key.outputs.key_version }}-${{ steps.set_llvm_key.outputs.key_native_arch }}-v${{ inputs.llvm_version }}-${{ inputs.llvm_build_type }}
@@ -130,7 +130,7 @@ runs:
     # This is deprecated and will be removed soon.
     - name: load llvm cross cache
       if: inputs.cross_arch != 'none' && inputs.llvm_source == 'cache'
-      uses: actions/cache/restore@v4
+      uses: actions/cache/restore@v5
       with:
         path: llvm_install/**
         key: llvm-${{ inputs.os }}-${{ steps.set_llvm_key.outputs.key_version }}-${{ steps.set_llvm_key.outputs.key_arch }}-v${{ inputs.llvm_version }}-${{ inputs.llvm_build_type }}
@@ -149,7 +149,7 @@ runs:
 
       # note the PR testing usage should set 'save' to false, to avoid PR testing creating new caches on a branch
     - name: Setup ccache
-      uses: hendrikmuhs/ccache-action@bfa03e1de4d7f7c3e80ad9109feedd05c4f5a716 # v1.2.19
+      uses: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639 # v1.2.20
       with:
         max-size: 200M
         key: ccache-build-${{ inputs.os }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 958000bfc..777fb0015 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       # installs tools, ninja and installs llvm (default 20, RelAssert) and sets up cache
       - name: setup-ubuntu
@@ -35,7 +35,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL (${{ matrix.name }})
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@v4.31.9
         with:
           languages: c-cpp
           build-mode: manual
@@ -56,7 +56,7 @@ jobs:
           build_targets:
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@v4.31.9
         with:
           category: "/language:c-cpp"
 
@@ -76,7 +76,7 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       # installs tools, ninja and installs llvm (default 18, RelAssert) and sets up cache
       - name: setup-ubuntu
@@ -87,7 +87,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL (${{ matrix.name }})
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@v4.31.9
         with:
           languages: c-cpp
           build-mode: manual
@@ -96,7 +96,7 @@ jobs:
         uses: ./.github/actions/do_build_ock/do_build_m1
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@v4.31.9
         with:
           category: "/language:c-cpp"
 
diff --git a/.github/workflows/create_llvm_artefacts.yml b/.github/workflows/create_llvm_artefacts.yml
index b528c1709..175d4b531 100644
--- a/.github/workflows/create_llvm_artefacts.yml
+++ b/.github/workflows/create_llvm_artefacts.yml
@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout repo ock platform
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: build llvm artefact
         uses: ./.github/actions/do_build_llvm
         with:
@@ -43,7 +43,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repo ock platform
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: build llvm artefact
         uses: ./.github/actions/do_build_llvm
         with:
@@ -57,7 +57,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout repo ock platform
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: build llvm artefact
         uses: ./.github/actions/do_build_llvm
         with:
@@ -72,7 +72,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout repo ock platform
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: build llvm artefact
         uses: ./.github/actions/do_build_llvm
         with:
@@ -87,7 +87,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repo ock platform
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: build llvm artefact
         uses: ./.github/actions/do_build_llvm
         with:
@@ -102,7 +102,7 @@ jobs:
     runs-on: windows-2025
     steps:
       - name: Checkout repo ock platform
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: build llvm artefact
         uses: ./.github/actions/do_build_llvm
         with:
diff --git a/.github/workflows/create_opencl_cts_artefact.yml b/.github/workflows/create_opencl_cts_artefact.yml
index d1eebece1..f2f7b4685 100644
--- a/.github/workflows/create_opencl_cts_artefact.yml
+++ b/.github/workflows/create_opencl_cts_artefact.yml
@@ -40,7 +40,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
       - name: clone ock platform
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           sparse-checkout: |
             platform
@@ -63,7 +63,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
       - name: clone ock
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           sparse-checkout: |
             scripts
diff --git a/.github/workflows/create_publish_artifacts.yml b/.github/workflows/create_publish_artifacts.yml
index 1fee8da89..b360b5902 100644
--- a/.github/workflows/create_publish_artifacts.yml
+++ b/.github/workflows/create_publish_artifacts.yml
@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
        # installs tools, ninja, installs llvm and sets up ccache
       - name: Setup ubuntu
@@ -90,7 +90,7 @@ jobs:
           tar -czf ock_install.tar.gz install
 
       - name: Upload Artifacts
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6.0.0
         with:
           name: riscv-build
           path: ock_install.tar.gz
@@ -106,7 +106,7 @@ jobs:
           fi
 
       - name: Create OCK pre-release
-        uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
         env:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
         with:
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index abecfe241..ce5af4381 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - uses: actions/setup-python@v6
         with:
diff --git a/.github/workflows/planned_testing_caller_20.yml b/.github/workflows/planned_testing_caller_20.yml
index b4bcddc85..e9c2945d6 100644
--- a/.github/workflows/planned_testing_caller_20.yml
+++ b/.github/workflows/planned_testing_caller_20.yml
@@ -51,7 +51,7 @@ jobs:
       actions: write # for gh cache delete
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           sparse-checkout: .github
       - name: Cache clean
diff --git a/.github/workflows/planned_testing_caller_21.yml b/.github/workflows/planned_testing_caller_21.yml
index 51d9bbd91..b097e5a7a 100644
--- a/.github/workflows/planned_testing_caller_21.yml
+++ b/.github/workflows/planned_testing_caller_21.yml
@@ -50,7 +50,7 @@ jobs:
       actions: write # for gh cache delete
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           sparse-checkout: .github
       - name: Cache clean
diff --git a/.github/workflows/planned_testing_caller_main.yml b/.github/workflows/planned_testing_caller_main.yml
index 8fadbde3b..1124eeb43 100644
--- a/.github/workflows/planned_testing_caller_main.yml
+++ b/.github/workflows/planned_testing_caller_main.yml
@@ -33,7 +33,7 @@ jobs:
       actions: write # for gh cache delete
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           sparse-checkout: .github
       - name: Cache clean
diff --git a/.github/workflows/pr_tests_cache.yml b/.github/workflows/pr_tests_cache.yml
index 3c7b6c22e..9b69afcb9 100644
--- a/.github/workflows/pr_tests_cache.yml
+++ b/.github/workflows/pr_tests_cache.yml
@@ -38,7 +38,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}    
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup ubuntu
         uses: ./.github/actions/setup_build
@@ -68,7 +68,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}    
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-ubuntu
         uses:  ./.github/actions/setup_build
@@ -119,7 +119,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}    
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
         # installs tools, ninja, installs llvm and sets up sccache
       - name: setup-ubuntu
@@ -145,7 +145,7 @@ jobs:
           arch: amd64
 
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       # installs tools, ninja, installs llvm and sets up ccache
       - name: setup-windows
@@ -173,7 +173,7 @@ jobs:
           arch: amd64
 
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       # installs tools, ninja, installs llvm and sets up ccache
       - name: setup-windows
@@ -201,7 +201,7 @@ jobs:
       actions: write # for gh cache delete
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           sparse-checkout: .github
       - name: Cache clean
diff --git a/.github/workflows/publish_docker_images.yml b/.github/workflows/publish_docker_images.yml
index 4d1cc36f6..0cbb3dcbe 100644
--- a/.github/workflows/publish_docker_images.yml
+++ b/.github/workflows/publish_docker_images.yml
@@ -24,7 +24,7 @@ jobs:
       packages: write
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - name: Login to GitHub Container Registry
       uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
       with:
@@ -47,7 +47,7 @@ jobs:
       packages: write
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - name: Login to GitHub Container Registry
       uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
       with:
diff --git a/.github/workflows/publish_docs.yml b/.github/workflows/publish_docs.yml
index d1af3eb94..e1b3a3c38 100644
--- a/.github/workflows/publish_docs.yml
+++ b/.github/workflows/publish_docs.yml
@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout OCK
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - uses: actions/setup-python@v6
         with:
@@ -50,7 +50,7 @@ jobs:
            cmake --build build_doc --target doc_html
 
       - name: Checkout RFCs
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: rfcs
           path: rfcs
diff --git a/.github/workflows/run_ock_external_tests.yml b/.github/workflows/run_ock_external_tests.yml
index 98494fd34..77c9604fc 100644
--- a/.github/workflows/run_ock_external_tests.yml
+++ b/.github/workflows/run_ock_external_tests.yml
@@ -146,7 +146,7 @@ jobs:
     if: inputs.ock && contains(inputs.target_list, 'host_x86_64_windows')
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       # Todo: move to a common place e.g. setup_build
       - name: Setup Windows llvm base
         uses: llvm/actions/setup-windows@a1ea791b03c8e61f53a0e66f2f73db283aa0f01e # main branch
@@ -180,7 +180,7 @@ jobs:
     if: inputs.ock && contains(inputs.target_list, 'linux')
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - uses: ./.github/actions/setup_gh
         with:
           os: ${{ contains( matrix.target, 'windows') && 'windows' || 'ubuntu' }}
@@ -211,7 +211,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
       - name: clone ock platform
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           sparse-checkout: |
             platform
@@ -239,7 +239,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: setup-ubuntu
         uses: ./.github/actions/setup_build
         with:
@@ -263,7 +263,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: setup-ubuntu
         uses: ./.github/actions/setup_build
         with:
@@ -286,7 +286,7 @@ jobs:
     runs-on: ${{ matrix.target == 'host_x86_64_linux' && 'ubuntu-22.04' || 'ubuntu-22.04-arm' }}
     steps:
       - name: clone ock platform
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           sparse-checkout: |
             platform
@@ -319,7 +319,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
       - name: clone ock
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           # scripts: for run_cities.py
           # source: for CTS filter.csv files
@@ -350,7 +350,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
       - name: clone ock
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           # scripts: for run_cities.py
           # source: for CTS filter.csv files
@@ -380,7 +380,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
       - name: clone ock
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           # scripts: for run_cities.py
           # source: for CTS filter.csv files
@@ -409,7 +409,7 @@ jobs:
     if: (inputs.test_sycl_cts || inputs.test_sycl_e2e) && ( contains(inputs.target_list, 'host_x86_64_linux') || contains(inputs.target_list, 'host_riscv64_linux') )
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: set up gh
         uses: ./.github/actions/setup_gh
         with:
@@ -434,7 +434,7 @@ jobs:
     if: (inputs.test_sycl_cts || inputs.test_sycl_e2e) && contains(inputs.target_list, 'host_aarch64_linux')
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: set up gh
         uses: ./.github/actions/setup_gh
         with:
@@ -463,7 +463,7 @@ jobs:
     if: inputs.test_sycl_cts && inputs.ock && contains(inputs.target_list, 'host_x86_64_linux')
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: set up gh
         uses: ./.github/actions/setup_gh
         with:
@@ -483,7 +483,7 @@ jobs:
     if: inputs.test_sycl_cts && inputs.ock && contains(inputs.target_list, 'host_x86_64_linux')
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       # download sycl cts build subset artefacts, combine, upload
       - name: combine SYCL-CTS build artifacts
         uses: ./.github/actions/combine_sycl_cts_artifacts
@@ -506,7 +506,7 @@ jobs:
     if: inputs.test_sycl_cts && inputs.ock && contains(inputs.target_list, 'host_aarch64_linux')
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: set up gh
         uses: ./.github/actions/setup_gh
         with:
@@ -526,7 +526,7 @@ jobs:
     if: inputs.test_sycl_cts && inputs.ock && contains(inputs.target_list, 'host_aarch64_linux')
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       # download sycl cts build subset artefacts, combine, upload
       - name: combine SYCL-CTS build artifacts
         uses: ./.github/actions/combine_sycl_cts_artifacts
@@ -545,7 +545,7 @@ jobs:
     if: inputs.test_sycl_cts && inputs.ock && contains(inputs.target_list, 'host_x86_64_linux')
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: run sycl cts
         uses: ./.github/actions/run_sycl_cts
         with:
@@ -563,7 +563,7 @@ jobs:
     if: inputs.test_sycl_cts && inputs.ock && contains(inputs.target_list, 'host_aarch64_linux')
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: run sycl cts
         uses: ./.github/actions/run_sycl_cts
         with:
@@ -581,7 +581,7 @@ jobs:
     if: inputs.test_sycl_e2e && inputs.ock && contains(inputs.target_list, 'host_x86_64_linux')
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: build e2e
         uses: ./.github/actions/do_build_run_sycl_e2e
         with:
@@ -598,7 +598,7 @@ jobs:
     if: inputs.test_sycl_e2e && inputs.ock && contains(inputs.target_list, 'host_aarch64_linux')
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: build e2e
         uses: ./.github/actions/do_build_run_sycl_e2e
         with:
diff --git a/.github/workflows/run_ock_internal_tests.yml b/.github/workflows/run_ock_internal_tests.yml
index 8ac88bdb7..7b312df13 100644
--- a/.github/workflows/run_ock_internal_tests.yml
+++ b/.github/workflows/run_ock_internal_tests.yml
@@ -91,7 +91,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       # installs tools, ninja, installs llvm and sets up ccache
       - name: setup-ubuntu
@@ -126,7 +126,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       # installs tools, ninja, installs llvm and sets up ccache
       - name: setup-ubuntu
@@ -177,7 +177,7 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-ubuntu-clang-format
         run:
@@ -203,7 +203,7 @@ jobs:
           arch: amd64
 
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       # installs tools, ninja, installs llvm and sets up ccache
       - name: setup-windows
@@ -228,7 +228,7 @@ jobs:
     timeout-minutes: 60
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - name: setup-ubuntu
       uses: ./.github/actions/setup_build
       with:
@@ -250,7 +250,7 @@ jobs:
     timeout-minutes: 90 # offline needs longer timeout
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - name: setup-ubuntu
       uses: ./.github/actions/setup_build
       with:
@@ -272,7 +272,7 @@ jobs:
     timeout-minutes: 60
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - name: setup-ubuntu
       uses: ./.github/actions/setup_build
       with:
@@ -296,7 +296,7 @@ jobs:
     timeout-minutes: 60
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - name: setup-ubuntu
       uses: ./.github/actions/setup_build
       with:
@@ -306,7 +306,7 @@ jobs:
     - name: build and run ock
       uses: ./.github/actions/do_build_pr/run_ubuntu_gcc_x86_64_riscv_cl3_0
     - name: download cached opencl_cts artifact
-      uses: actions/cache/restore@v4
+      uses: actions/cache/restore@v5
       with:
         key: opencl_cts_host_x86_64_linux
         path: build/test_conformance
@@ -332,7 +332,7 @@ jobs:
     timeout-minutes: 60
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - name: setup-ubuntu
       uses: ./.github/actions/setup_build
       with:
@@ -345,7 +345,7 @@ jobs:
         build_targets: 'check-ock-UnitCL-group-vecz'
         disable_unitcl_vecz_checks: 'OFF'
     - name: download cached opencl_cts artifact
-      uses: actions/cache/restore@v4
+      uses: actions/cache/restore@v5
       with:
         key: opencl_cts_host_x86_64_linux
         path: build/test_conformance
@@ -368,7 +368,7 @@ jobs:
     timeout-minutes: 60
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - name: setup-ubuntu
       uses: ./.github/actions/setup_build
       with:
@@ -389,7 +389,7 @@ jobs:
     timeout-minutes: 90 # aarch64 needs longer timeout
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - name: setup-ubuntu
       uses: ./.github/actions/setup_build
       with:
@@ -411,7 +411,7 @@ jobs:
     timeout-minutes: 60
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - run: echo WORKSPACE is $GITHUB_WORKSPACE && echo PWD is `pwd` && ls -al
     - name: Run Clik
       run: |
@@ -437,7 +437,7 @@ jobs:
     timeout-minutes: 60
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - name: setup-ubuntu
       uses: ./.github/actions/setup_build
       with:
@@ -447,7 +447,7 @@ jobs:
     - name: build ock
       uses: ./.github/actions/do_build_pr/run_ubuntu_gcc_x86_64_refsi_g1_wi_cl3_0
     - name: download cached opencl_cts artifact
-      uses: actions/cache/restore@v4
+      uses: actions/cache/restore@v5
       with:
         key: opencl_cts_host_x86_64_linux
         path: build/test_conformance
@@ -473,7 +473,7 @@ jobs:
     timeout-minutes: 60
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - name: setup-ubuntu
       uses: ./.github/actions/setup_build
       with:
@@ -494,7 +494,7 @@ jobs:
     timeout-minutes: 60
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - name: setup-ubuntu
       uses: ./.github/actions/setup_build
       with:
@@ -517,7 +517,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     # installs tools, ninja, installs llvm and sets up ccache
     - name: setup-ubuntu
@@ -527,7 +527,7 @@ jobs:
         llvm_source: ${{ inputs.llvm_source}}
         github_token: ${{ secrets.GITHUB_TOKEN }}
     - name: Checkout llvm-project
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         repository: llvm/llvm-project
         path: llvm-project
@@ -553,7 +553,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     # installs tools, ninja, installs llvm and sets up ccache
     - name: setup-ubuntu
@@ -576,7 +576,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     # installs tools, ninja, installs llvm and sets up ccache
     - name: setup-ubuntu
@@ -600,7 +600,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     # installs tools, ninja, installs llvm and sets up ccache
     - name: setup-ubuntu
@@ -623,7 +623,7 @@ jobs:
         arch: amd64
 
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     # installs tools, ninja, installs llvm and sets up ccache
     - name: setup-windows
@@ -647,7 +647,7 @@ jobs:
         - ${{github.workspace}}:${{github.workspace}}
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       # Install requirements
     - name: Install clang-tidy and parallel
       run: |
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 0bb781392..44cfecf49 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v4.2.0
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v4.2.0
         with:
           persist-credentials: false
 
@@ -41,7 +41,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
           name: SARIF file
           path: results.sarif
@@ -50,6 +50,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@5d5cd550d3e189c569da8f16ea8de2d821c9bf7a # v3.31.2
+        uses: github/codeql-action/upload-sarif@f67ec12472e1b361f5e1e2085f5e6f85a57e3cd6 # v3.31.2
         with:
           sarif_file: results.sarif