diff --git a/.github/actions/setup-sfw/action.yml b/.github/actions/setup-sfw/action.yml
index 11048d80..0fb5b32d 100644
--- a/.github/actions/setup-sfw/action.yml
+++ b/.github/actions/setup-sfw/action.yml
@@ -32,7 +32,7 @@ runs:
         python-version: "3.12"
 
     - if: ${{ inputs.node == 'true' }}
-      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: "20"
 
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index fba08631..afe59aff 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -210,7 +210,7 @@ jobs:
 
       - name: Upload SFW report artifact
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: socket-firewall-free-python-${{ github.event.pull_request.number }}
           path: sfw-artifacts/
@@ -302,7 +302,7 @@ jobs:
 
       - name: Upload SFW report artifact
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: socket-firewall-enterprise-python-${{ github.event.pull_request.number }}
           path: sfw-artifacts/
@@ -362,7 +362,7 @@ jobs:
 
       - name: Upload SFW report artifact
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: socket-firewall-free-npm-${{ github.event.pull_request.number }}
           path: sfw-artifacts/
@@ -424,7 +424,7 @@ jobs:
 
       - name: Upload SFW report artifact
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: socket-firewall-enterprise-npm-${{ github.event.pull_request.number }}
           path: sfw-artifacts/
@@ -487,7 +487,7 @@ jobs:
 
       - name: Upload SFW report artifact
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: socket-firewall-free-pypi-${{ github.event.pull_request.number }}
           path: sfw-artifacts/
@@ -552,7 +552,7 @@ jobs:
 
       - name: Upload SFW report artifact
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: socket-firewall-enterprise-pypi-${{ github.event.pull_request.number }}
           path: sfw-artifacts/
diff --git a/.github/workflows/e2e-test.yml b/.github/workflows/e2e-test.yml
index fe763699..2cb3c9fd 100644
--- a/.github/workflows/e2e-test.yml
+++ b/.github/workflows/e2e-test.yml
@@ -84,7 +84,7 @@ jobs:
         with:
           python-version: '3.12'
 
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         if: matrix.setup-node == 'true'
         with:
           node-version: '20'
@@ -138,7 +138,7 @@ jobs:
 
       - name: Upload diagnostics on failure
         if: failure() || steps.run-cli.outputs.diagnostics == 'true'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: e2e-${{ matrix.name }}-diagnostics-attempt${{ github.run_attempt }}
           path: |
diff --git a/.github/workflows/package-check.yml b/.github/workflows/package-check.yml
index d71083a4..517199cd 100644
--- a/.github/workflows/package-check.yml
+++ b/.github/workflows/package-check.yml
@@ -58,7 +58,7 @@ jobs:
           PY
 
       - name: Upload distributions
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: socketsecurity-${{ github.sha }}
           path: dist/*
diff --git a/.github/workflows/pr-preview.yml b/.github/workflows/pr-preview.yml
index 620eb016..cdd1ffbf 100644
--- a/.github/workflows/pr-preview.yml
+++ b/.github/workflows/pr-preview.yml
@@ -153,7 +153,7 @@ jobs:
           PY
 
       - name: Upload preview distributions
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: socketsecurity-preview-${{ github.run_id }}-${{ github.run_attempt }}
           path: dist/*
@@ -173,7 +173,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Download preview distributions
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: socketsecurity-preview-${{ github.run_id }}-${{ github.run_attempt }}
           path: dist
@@ -246,7 +246,7 @@ jobs:
           persist-credentials: false
 
       - name: Download preview distributions
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: socketsecurity-preview-${{ github.run_id }}-${{ github.run_attempt }}
           path: dist