diff --git a/.github/workflows/container-build-push.yaml b/.github/workflows/container-build-push.yaml
index eca5e49..99de06f 100644
--- a/.github/workflows/container-build-push.yaml
+++ b/.github/workflows/container-build-push.yaml
@@ -53,7 +53,7 @@ jobs:
 
       - name: "Build and push Docker image"
         id: build-and-push
-        uses: docker/build-push-action@5176d81f87c23d6fc96624dfdbcd9f3830bbe445 # v6.5.0
+        uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
         with:
           file: ${{ inputs.file-name }}
           push: ${{ inputs.push }}
@@ -66,7 +66,7 @@ jobs:
 
       - name: Generate artifact attestation
         if: ${{ inputs.push }}
-        uses: actions/attest-build-provenance@210c1913531870065f03ce1f9440dd87bc0938cd # v1.4.0
+        uses: actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c # v1.4.3
         with:
           subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
           subject-digest: ${{ steps.build-and-push.outputs.digest }}
diff --git a/.github/workflows/generic-precommit.yaml b/.github/workflows/generic-precommit.yaml
index e6323db..d65c730 100644
--- a/.github/workflows/generic-precommit.yaml
+++ b/.github/workflows/generic-precommit.yaml
@@ -24,11 +24,11 @@ jobs:
         run: echo '${{ env.PYTHONUSERBASE }}/bin/' >> $GITHUB_PATH
 
       - name: "Checkout repository"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: "Setup Python"
         id: python
-        uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
+        uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
         with:
           python-version: ${{ inputs.python-version }}
           allow-prereleases: true
diff --git a/.github/workflows/github-pages-go-hugo.yaml b/.github/workflows/github-pages-go-hugo.yaml
index cd72271..d595ba7 100644
--- a/.github/workflows/github-pages-go-hugo.yaml
+++ b/.github/workflows/github-pages-go-hugo.yaml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
         with:
           submodules: 'recursive'
 
diff --git a/.github/workflows/github-pages-python-sphinx.yaml b/.github/workflows/github-pages-python-sphinx.yaml
index cd0b9fd..879a9f0 100644
--- a/.github/workflows/github-pages-python-sphinx.yaml
+++ b/.github/workflows/github-pages-python-sphinx.yaml
@@ -20,10 +20,10 @@ jobs:
 
     steps:
       - name: "Checkout repository"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: "Setup Python"
-        uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
+        uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
         with:
           python-version: ${{ inputs.python-version }}
           allow-prereleases: true
diff --git a/.github/workflows/github-pages-rust-doc.yaml b/.github/workflows/github-pages-rust-doc.yaml
index a61dc1d..96ff45c 100644
--- a/.github/workflows/github-pages-rust-doc.yaml
+++ b/.github/workflows/github-pages-rust-doc.yaml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: "Checkout repository"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: "Build docs with cargo"
         run: cargo doc --no-deps --document-private-items
diff --git a/.github/workflows/python-lint.yaml b/.github/workflows/python-lint.yaml
index 87ac686..acecbe0 100644
--- a/.github/workflows/python-lint.yaml
+++ b/.github/workflows/python-lint.yaml
@@ -15,10 +15,10 @@ jobs:
     
     steps:
       - name: "Checkout repository"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: "Setup Python"
-        uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
+        uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
         with:
           python-version: ${{ inputs.python-version }}
           allow-prereleases: true
diff --git a/.github/workflows/python-pypi-publish.yaml b/.github/workflows/python-pypi-publish.yaml
index 3a4dfa5..036f9ba 100644
--- a/.github/workflows/python-pypi-publish.yaml
+++ b/.github/workflows/python-pypi-publish.yaml
@@ -23,10 +23,10 @@ jobs:
 
     steps:
       - name: "Checkout repository"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: "Set up Python"
-        uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
+        uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
         with:
           python-version: ${{ inputs.python-version }}
           allow-prereleases: true
@@ -48,13 +48,13 @@ jobs:
 
       - name: "Upload the built distributions as artifacts"
         if: ${{ inputs.upload }}
-        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
         with:
           name: packages
           path: dist
 
       - name: "Publish distribution 📦 to PyPI"
-        uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 # v1.9.0
+        uses: pypa/gh-action-pypi-publish@897895f1e160c830e369f9779632ebc134688e1b # v1.10.2
         with:
           skip-existing: true
           verbose: true
diff --git a/.github/workflows/python-test.yaml b/.github/workflows/python-test.yaml
index 9f59c4c..6a40f77 100644
--- a/.github/workflows/python-test.yaml
+++ b/.github/workflows/python-test.yaml
@@ -28,12 +28,12 @@ jobs:
 
     steps:
       - name: "Checkout repository"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
       - name: "Setup Python"
-        uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
+        uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
         with:
           python-version: "${{ inputs.python-version }}"
           allow-prereleases: true
diff --git a/.github/workflows/rust-clippy.yaml b/.github/workflows/rust-clippy.yaml
index c217d2b..f0bcf71 100644
--- a/.github/workflows/rust-clippy.yaml
+++ b/.github/workflows/rust-clippy.yaml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout repository"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: "Cache dependencies"
         uses: Swatinem/rust-cache@23bce251a8cd2ffc3c1075eaa2367cf899916d84 # v2.7.3
diff --git a/.github/workflows/rust-crates-io-publish.yaml b/.github/workflows/rust-crates-io-publish.yaml
index 2f6ac1d..62a6367 100644
--- a/.github/workflows/rust-crates-io-publish.yaml
+++ b/.github/workflows/rust-crates-io-publish.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout repository"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: "Publish to crates.io"
         run: cargo publish
diff --git a/.github/workflows/rust-lint.yaml b/.github/workflows/rust-lint.yaml
index e0dc0ae..6ebb1f2 100644
--- a/.github/workflows/rust-lint.yaml
+++ b/.github/workflows/rust-lint.yaml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout repository"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: "Check formatting"
         run: cargo fmt --all -- --check
diff --git a/.github/workflows/rust-test.yaml b/.github/workflows/rust-test.yaml
index 7d48017..1e4c168 100644
--- a/.github/workflows/rust-test.yaml
+++ b/.github/workflows/rust-test.yaml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ${{ inputs.os }}
     steps:
       - name: "Checkout repository"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: "Cache dependencies"
         uses: Swatinem/rust-cache@23bce251a8cd2ffc3c1075eaa2367cf899916d84 # v2.7.3