diff --git a/.github/workflows/community-plugin-cd.yml b/.github/workflows/community-plugin-cd.yml
index b7c2fc2..98adaac 100644
--- a/.github/workflows/community-plugin-cd.yml
+++ b/.github/workflows/community-plugin-cd.yml
@@ -16,7 +16,7 @@ jobs:
           fetch-depth: "0"
 
       - name: cd/download-artifact
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: dist
           path: dist
diff --git a/.github/workflows/community-plugin-ci.yml b/.github/workflows/community-plugin-ci.yml
index 9cdb12b..2a7b1e5 100644
--- a/.github/workflows/community-plugin-ci.yml
+++ b/.github/workflows/community-plugin-ci.yml
@@ -25,13 +25,13 @@ jobs:
           fetch-depth: 0
 
       - name: ci/setup
-        uses: mattermost/actions/plugin-ci/setup@0256d363493a1e6b9e361ea788c62a0a73bc00be
+        uses: mattermost/actions/plugin-ci/setup@21fc5e2a00837bf57978e8491ba2c532dd3bd73c
         with:
           go-version-file: ${{ inputs.go-version-file }}
           golangci-lint-version: ${{ inputs.golangci-lint-version }}
 
       - name: ci/lint
-        uses: mattermost/actions/plugin-ci/lint@0256d363493a1e6b9e361ea788c62a0a73bc00be
+        uses: mattermost/actions/plugin-ci/lint@21fc5e2a00837bf57978e8491ba2c532dd3bd73c
 
   test:
     runs-on: ubuntu-latest
@@ -42,13 +42,13 @@ jobs:
           fetch-depth: 0
 
       - name: ci/setup
-        uses: mattermost/actions/plugin-ci/setup@0256d363493a1e6b9e361ea788c62a0a73bc00be
+        uses: mattermost/actions/plugin-ci/setup@21fc5e2a00837bf57978e8491ba2c532dd3bd73c
         with:
           go-version-file: ${{ inputs.go-version-file }}
           golangci-lint-version: ${{ inputs.golangci-lint-version }}
 
       - name: ci/test
-        uses: mattermost/actions/plugin-ci/test@0256d363493a1e6b9e361ea788c62a0a73bc00be
+        uses: mattermost/actions/plugin-ci/test@21fc5e2a00837bf57978e8491ba2c532dd3bd73c
 
   build:
     runs-on: ubuntu-latest
@@ -59,10 +59,10 @@ jobs:
           fetch-depth: 0
 
       - name: ci/setup
-        uses: mattermost/actions/plugin-ci/setup@0256d363493a1e6b9e361ea788c62a0a73bc00be
+        uses: mattermost/actions/plugin-ci/setup@21fc5e2a00837bf57978e8491ba2c532dd3bd73c
         with:
           go-version-file: ${{ inputs.go-version-file }}
           golangci-lint-version: ${{ inputs.golangci-lint-version }}
 
       - name: ci/build
-        uses: mattermost/actions/plugin-ci/build@0256d363493a1e6b9e361ea788c62a0a73bc00be
+        uses: mattermost/actions/plugin-ci/build@21fc5e2a00837bf57978e8491ba2c532dd3bd73c
diff --git a/.github/workflows/plugin-cd.yml b/.github/workflows/plugin-cd.yml
index e150dfd..df9d5c5 100644
--- a/.github/workflows/plugin-cd.yml
+++ b/.github/workflows/plugin-cd.yml
@@ -44,7 +44,7 @@ jobs:
           fetch-depth: 0
 
       - name: ci/setup
-        uses: mattermost/actions/plugin-ci/setup@0256d363493a1e6b9e361ea788c62a0a73bc00be
+        uses: mattermost/actions/plugin-ci/setup@21fc5e2a00837bf57978e8491ba2c532dd3bd73c
         with:
           go-version-file: ${{ inputs.go-version-file }}
 
@@ -53,7 +53,7 @@ jobs:
           MM_RUDDER_PLUGINS_PROD: ${{ secrets.MM_RUDDER_PLUGINS_PROD }}
           MM_RUDDER_CALLS_PROD: ${{ secrets.MM_RUDDER_CALLS_PROD }}
           MM_RUDDER_DATAPLANE_URL: ${{ secrets.MM_RUDDER_DATAPLANE_URL }}
-        uses: mattermost/actions/plugin-ci/build@0256d363493a1e6b9e361ea788c62a0a73bc00be
+        uses: mattermost/actions/plugin-ci/build@21fc5e2a00837bf57978e8491ba2c532dd3bd73c
 
   release-s3:
     if: startsWith(github.ref, 'refs/tags/v') && github.repository_owner == 'mattermost'
@@ -61,7 +61,7 @@ jobs:
     needs: [build]
     steps:
       - name: ci/download-artifact
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: dist
           path: dist
@@ -73,7 +73,7 @@ jobs:
         working-directory: dist
 
       - name: ci/aws-configure
-        uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v6.0.0
+        uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
         with:
           aws-region: us-east-1
           role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID_RELEASE }}:role/mattermost-release-plugin-store-role
@@ -95,7 +95,7 @@ jobs:
         with:
           fetch-depth: "0"
       - name: ci/download-artifact
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: dist
           path: dist
diff --git a/.github/workflows/plugin-ci.yml b/.github/workflows/plugin-ci.yml
index cd05f77..50cf386 100644
--- a/.github/workflows/plugin-ci.yml
+++ b/.github/workflows/plugin-ci.yml
@@ -58,13 +58,13 @@ jobs:
           fetch-depth: 0
 
       - name: ci/setup
-        uses: mattermost/actions/plugin-ci/setup@0256d363493a1e6b9e361ea788c62a0a73bc00be
+        uses: mattermost/actions/plugin-ci/setup@21fc5e2a00837bf57978e8491ba2c532dd3bd73c
         with:
           go-version-file: ${{ inputs.go-version-file }}
           golangci-lint-version: ${{ inputs.golangci-lint-version }}
 
       - name: ci/lint
-        uses: mattermost/actions/plugin-ci/lint@0256d363493a1e6b9e361ea788c62a0a73bc00be
+        uses: mattermost/actions/plugin-ci/lint@21fc5e2a00837bf57978e8491ba2c532dd3bd73c
 
   test:
     if: ${{ github.repository_owner == 'mattermost' || github.event_name != 'schedule' || inputs.run-scheduled }}
@@ -76,12 +76,12 @@ jobs:
           fetch-depth: 0
 
       - name: ci/setup
-        uses: mattermost/actions/plugin-ci/setup@0256d363493a1e6b9e361ea788c62a0a73bc00be
+        uses: mattermost/actions/plugin-ci/setup@21fc5e2a00837bf57978e8491ba2c532dd3bd73c
         with:
           go-version-file: ${{ inputs.go-version-file }}
 
       - name: ci/test
-        uses: mattermost/actions/plugin-ci/test@0256d363493a1e6b9e361ea788c62a0a73bc00be
+        uses: mattermost/actions/plugin-ci/test@21fc5e2a00837bf57978e8491ba2c532dd3bd73c
 
   build:
     if: ${{ github.repository_owner == 'mattermost' || github.event_name != 'schedule' || inputs.run-scheduled }}
@@ -93,12 +93,12 @@ jobs:
           fetch-depth: 0
 
       - name: ci/setup
-        uses: mattermost/actions/plugin-ci/setup@0256d363493a1e6b9e361ea788c62a0a73bc00be
+        uses: mattermost/actions/plugin-ci/setup@21fc5e2a00837bf57978e8491ba2c532dd3bd73c
         with:
           go-version-file: ${{ inputs.go-version-file }}
 
       - name: ci/build
-        uses: mattermost/actions/plugin-ci/build@0256d363493a1e6b9e361ea788c62a0a73bc00be
+        uses: mattermost/actions/plugin-ci/build@21fc5e2a00837bf57978e8491ba2c532dd3bd73c
 
   delivery:
     if: ${{ github.repository_owner == 'mattermost' && github.event_name != 'schedule' && (github.ref_name  == 'master' || github.ref_name  == 'main') }}
@@ -106,7 +106,7 @@ jobs:
     needs: [lint, test, build]
     steps:
       - name: ci/download-artifact
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: dist
           path: dist
@@ -116,7 +116,7 @@ jobs:
         working-directory: dist
 
       - name: ci/aws-configure
-        uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v6.0.0
+        uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
         with:
           aws-region: us-east-1
           role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID_RELEASE }}:role/mattermost-release-plugin-store-role
diff --git a/.github/workflows/plugin-dist-pr.yml b/.github/workflows/plugin-dist-pr.yml
index 7631d53..92d1856 100644
--- a/.github/workflows/plugin-dist-pr.yml
+++ b/.github/workflows/plugin-dist-pr.yml
@@ -42,7 +42,7 @@ jobs:
           fetch-depth: 0
 
       - name: ci/setup-go
-        uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version-file: ${{ inputs.go-version-file }}
           cache: false
@@ -94,7 +94,7 @@ jobs:
         run: make "$VERIFY_TARGET"
 
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v6.0.0
+        uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
         with:
           aws-access-key-id: ${{ secrets.PLUGIN_DELIVERY_AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.PLUGIN_DELIVERY_AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/snyk-sbom.yml b/.github/workflows/snyk-sbom.yml
index 8705fcc..6dfa01f 100644
--- a/.github/workflows/snyk-sbom.yml
+++ b/.github/workflows/snyk-sbom.yml
@@ -26,7 +26,7 @@ jobs:
           ref: ${{ env.RELEASE_TAG }}
 
       - name: sbom/setup-node
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: '22.6.0'