diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4cc848db38..0ce3c16642 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -15,12 +15,12 @@ jobs:
       CI: "true"
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v3
         with:
           node-version: lts/*
       - name: Install dependencies
@@ -34,11 +34,10 @@ jobs:
           git diff --staged --patch --exit-code > .repo.patch || echo "self_mutation_happened=true" >> $GITHUB_OUTPUT
       - name: Upload patch
         if: steps.self_mutation.outputs.self_mutation_happened
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v3
         with:
           name: .repo.patch
           path: .repo.patch
-          overwrite: true
       - name: Fail build on mutation
         if: steps.self_mutation.outputs.self_mutation_happened
         run: |-
@@ -53,13 +52,13 @@ jobs:
     if: always() && needs.build.outputs.self_mutation_happened && !(github.event.pull_request.head.repo.full_name != github.repository)
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
         with:
           token: ${{ secrets.PROJEN_GITHUB_TOKEN }}
           ref: ${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
       - name: Download patch
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v3
         with:
           name: .repo.patch
           path: ${{ runner.temp }}
diff --git a/.github/workflows/bump-latest-cdk8s-plus-library.yml b/.github/workflows/bump-latest-cdk8s-plus-library.yml
index bb999ca838..8d4c1fb75b 100644
--- a/.github/workflows/bump-latest-cdk8s-plus-library.yml
+++ b/.github/workflows/bump-latest-cdk8s-plus-library.yml
@@ -89,7 +89,7 @@ jobs:
         continue-on-error: false
       - name: Create Pull Request
         id: create-pr
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v4
         with:
           token: ${{ secrets.PROJEN_GITHUB_TOKEN }}
           commit-message: |-
@@ -132,13 +132,12 @@ jobs:
           repository: cdk8s-team/cdk8s-plus
       - name: Create Issue with new backport label
         id: create-backport-label
-        uses: dacbd/create-issue-action@main
+        uses: nashmaniac/create-issue-action@v1.2
         with:
-          repo: cdk8s-team/cdk8s-plus
           token: ${{ secrets.PROJEN_GITHUB_TOKEN }}
           labels: backport-to-k8s-${{ needs.check-latest-k8s-release.outputs.currentVersion }}/main
           title: Create backport label for v${{ needs.check-latest-k8s-release.outputs.currentVersion }}
-          body: This issue will be closed after the new backport label is added.
+          body: <second action> This issue will be closed after the new backport label is added.
       - name: Close issue backport label issue
         uses: actions-ecosystem/action-add-labels@v1
         with:
@@ -233,7 +232,7 @@ jobs:
         continue-on-error: false
       - name: Create Pull Request
         id: create-pr
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v4
         with:
           token: ${{ secrets.PROJEN_GITHUB_TOKEN }}
           commit-message: |-
@@ -281,7 +280,7 @@ jobs:
         continue-on-error: false
       - name: Create Pull Request
         id: create-pr
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v4
         with:
           token: ${{ secrets.PROJEN_GITHUB_TOKEN }}
           commit-message: |-
diff --git a/.github/workflows/pull-request-lint.yml b/.github/workflows/pull-request-lint.yml
index 2c1c658cd4..3c16c6deb6 100644
--- a/.github/workflows/pull-request-lint.yml
+++ b/.github/workflows/pull-request-lint.yml
@@ -17,7 +17,7 @@ jobs:
     permissions:
       pull-requests: write
     steps:
-      - uses: amannn/action-semantic-pull-request@v5.4.0
+      - uses: amannn/action-semantic-pull-request@v5.0.2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
@@ -26,3 +26,4 @@ jobs:
             fix
             chore
           requireScope: false
+          githubBaseUrl: ${{ github.api_url }}
diff --git a/.github/workflows/upgrade-compiler-dependencies.yml b/.github/workflows/upgrade-compiler-dependencies.yml
index ea84d02013..4aa9a7e34e 100644
--- a/.github/workflows/upgrade-compiler-dependencies.yml
+++ b/.github/workflows/upgrade-compiler-dependencies.yml
@@ -15,9 +15,9 @@ jobs:
       patch_created: ${{ steps.create_patch.outputs.patch_created }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v3
         with:
           node-version: lts/*
       - name: Install dependencies
@@ -31,11 +31,10 @@ jobs:
           git diff --staged --patch --exit-code > .repo.patch || echo "patch_created=true" >> $GITHUB_OUTPUT
       - name: Upload patch
         if: steps.create_patch.outputs.patch_created
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v3
         with:
           name: .repo.patch
           path: .repo.patch
-          overwrite: true
   pr:
     name: Create Pull Request
     needs: upgrade
@@ -45,9 +44,10 @@ jobs:
     if: ${{ needs.upgrade.outputs.patch_created }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
+        with: {}
       - name: Download patch
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v3
         with:
           name: .repo.patch
           path: ${{ runner.temp }}
@@ -59,7 +59,7 @@ jobs:
           git config user.email "github-actions@github.com"
       - name: Create Pull Request
         id: create-pr
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v4
         with:
           token: ${{ secrets.PROJEN_GITHUB_TOKEN }}
           commit-message: |-
diff --git a/.github/workflows/upgrade-configuration.yml b/.github/workflows/upgrade-configuration.yml
index 716bdb223b..a1b660bc98 100644
--- a/.github/workflows/upgrade-configuration.yml
+++ b/.github/workflows/upgrade-configuration.yml
@@ -15,9 +15,9 @@ jobs:
       patch_created: ${{ steps.create_patch.outputs.patch_created }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v3
         with:
           node-version: lts/*
       - name: Install dependencies
@@ -31,11 +31,10 @@ jobs:
           git diff --staged --patch --exit-code > .repo.patch || echo "patch_created=true" >> $GITHUB_OUTPUT
       - name: Upload patch
         if: steps.create_patch.outputs.patch_created
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v3
         with:
           name: .repo.patch
           path: .repo.patch
-          overwrite: true
   pr:
     name: Create Pull Request
     needs: upgrade
@@ -45,9 +44,10 @@ jobs:
     if: ${{ needs.upgrade.outputs.patch_created }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
+        with: {}
       - name: Download patch
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v3
         with:
           name: .repo.patch
           path: ${{ runner.temp }}
@@ -59,7 +59,7 @@ jobs:
           git config user.email "github-actions@github.com"
       - name: Create Pull Request
         id: create-pr
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v4
         with:
           token: ${{ secrets.PROJEN_GITHUB_TOKEN }}
           commit-message: |-
diff --git a/.github/workflows/upgrade-dev-dependencies.yml b/.github/workflows/upgrade-dev-dependencies.yml
index ae91a3b93c..3d377fe161 100644
--- a/.github/workflows/upgrade-dev-dependencies.yml
+++ b/.github/workflows/upgrade-dev-dependencies.yml
@@ -15,9 +15,9 @@ jobs:
       patch_created: ${{ steps.create_patch.outputs.patch_created }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v3
         with:
           node-version: lts/*
       - name: Install dependencies
@@ -31,11 +31,10 @@ jobs:
           git diff --staged --patch --exit-code > .repo.patch || echo "patch_created=true" >> $GITHUB_OUTPUT
       - name: Upload patch
         if: steps.create_patch.outputs.patch_created
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v3
         with:
           name: .repo.patch
           path: .repo.patch
-          overwrite: true
   pr:
     name: Create Pull Request
     needs: upgrade
@@ -45,9 +44,10 @@ jobs:
     if: ${{ needs.upgrade.outputs.patch_created }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
+        with: {}
       - name: Download patch
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v3
         with:
           name: .repo.patch
           path: ${{ runner.temp }}
@@ -59,7 +59,7 @@ jobs:
           git config user.email "github-actions@github.com"
       - name: Create Pull Request
         id: create-pr
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v4
         with:
           token: ${{ secrets.PROJEN_GITHUB_TOKEN }}
           commit-message: |-
diff --git a/.github/workflows/upgrade-runtime-dependencies.yml b/.github/workflows/upgrade-runtime-dependencies.yml
index 4cf176f1de..2eb5403222 100644
--- a/.github/workflows/upgrade-runtime-dependencies.yml
+++ b/.github/workflows/upgrade-runtime-dependencies.yml
@@ -15,9 +15,9 @@ jobs:
       patch_created: ${{ steps.create_patch.outputs.patch_created }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v3
         with:
           node-version: lts/*
       - name: Install dependencies
@@ -31,11 +31,10 @@ jobs:
           git diff --staged --patch --exit-code > .repo.patch || echo "patch_created=true" >> $GITHUB_OUTPUT
       - name: Upload patch
         if: steps.create_patch.outputs.patch_created
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v3
         with:
           name: .repo.patch
           path: .repo.patch
-          overwrite: true
   pr:
     name: Create Pull Request
     needs: upgrade
@@ -45,9 +44,10 @@ jobs:
     if: ${{ needs.upgrade.outputs.patch_created }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
+        with: {}
       - name: Download patch
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v3
         with:
           name: .repo.patch
           path: ${{ runner.temp }}
@@ -59,7 +59,7 @@ jobs:
           git config user.email "github-actions@github.com"
       - name: Create Pull Request
         id: create-pr
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v4
         with:
           token: ${{ secrets.PROJEN_GITHUB_TOKEN }}
           commit-message: |-
diff --git a/.gitignore b/.gitignore
index 293353b442..bb5962503d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -31,6 +31,7 @@ jspm_packages/
 *.tgz
 .yarn-integrity
 .cache
+!/.projenrc.js
 /test-reports/
 junit.xml
 /coverage/
@@ -77,4 +78,3 @@ dist/
 /docs/reference/cdk8s-plus-25/typescript.md
 /docs/reference/cdk8s-plus-25/python.md
 !/.github/workflows/bump-latest-cdk8s-plus-library.yml
-!/.projenrc.ts
diff --git a/.npmignore b/.npmignore
index 016598ea66..e0bdbefe99 100644
--- a/.npmignore
+++ b/.npmignore
@@ -19,5 +19,3 @@ dist
 /.projenrc.js
 tsconfig.tsbuildinfo
 /.eslintrc.json
-/.gitattributes
-/.projenrc.ts
diff --git a/.projen/tasks.json b/.projen/tasks.json
index b3108ff672..cd0047afff 100644
--- a/.projen/tasks.json
+++ b/.projen/tasks.json
@@ -94,8 +94,7 @@
       "description": "Runs eslint against the codebase",
       "steps": [
         {
-          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ src test build-tools projenrc .projenrc.ts",
-          "receiveArgs": true
+          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern src test build-tools projenrc .projenrc.ts"
         }
       ]
     },
@@ -206,7 +205,7 @@
       },
       "steps": [
         {
-          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --dep=dev --filter=@types/jest,cdk8s,cdk8s-cli,cdk8s-plus-25,cdk8s-plus-26,cdk8s-plus-27,eslint-import-resolver-typescript,eslint-plugin-import,jest,lerna,semver,ts-jest,ts-node"
+          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --dep=dev --filter=@types/jest,@types/node,@typescript-eslint/eslint-plugin,@typescript-eslint/parser,cdk8s,cdk8s-cli,cdk8s-plus-25,cdk8s-plus-26,cdk8s-plus-27,constructs,eslint-import-resolver-typescript,eslint-plugin-import,eslint,jest,jest-junit,lerna,semver,ts-jest,ts-node"
         },
         {
           "exec": "yarn install --check-files"
diff --git a/tsconfig.dev.json b/tsconfig.dev.json
index da832d0d38..88cc2f2f33 100644
--- a/tsconfig.dev.json
+++ b/tsconfig.dev.json
@@ -26,6 +26,7 @@
     "target": "ES2019"
   },
   "include": [
+    ".projenrc.js",
     "src/**/*.ts",
     "test/**/*.ts",
     ".projenrc.ts",