diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
index 2ca93bb3..7c372896 100644
--- a/.github/workflows/build_and_test.yml
+++ b/.github/workflows/build_and_test.yml
@@ -44,7 +44,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@v6.0.0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@v7.1.0
         with:
           auto-commit: "true"
 
@@ -55,7 +55,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
-      - uses: Alfresco/alfresco-build-tools/.github/actions/free-hosted-runner-disk-space@v5.34.0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/free-hosted-runner-disk-space@v7.1.0
 
       - name: Setup nexus authentication
         run: |
@@ -120,7 +120,7 @@ jobs:
       - name: Bake Docker images
         env:
           TARGETARCH: linux/amd64,linux/arm64
-        uses: docker/bake-action@a4d7f0b5b91c14a296d792d4ec53a9db17f02e67  # v5.5.0
+        uses: docker/bake-action@64673bcfac9f7517fc75e79db735fdb62efe6c55  # v5.9.0
         with:
           set: |
             *.output=type=registry,push=true
@@ -141,14 +141,14 @@ jobs:
         uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db  # v3.6.1
     
       - name: Verify docker-compose
-        uses: Alfresco/alfresco-build-tools/.github/actions/dbp-charts/verify-compose@v6.0.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/dbp-charts/verify-compose@v7.1.0
         timeout-minutes: 10
         with:
           compose_file_path: test/docker-compose.yml
           quay_username: ${{ secrets.QUAY_USERNAME }}
           quay_password: ${{ secrets.QUAY_PASSWORD }}
 
-      - uses: Alfresco/alfresco-build-tools/.github/actions/docker-dump-containers-logs@v6.0.0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/docker-dump-containers-logs@v7.1.0
 
 
   helm-test:
@@ -161,7 +161,7 @@ jobs:
     runs-on: ${{ matrix.arch == 'arm64' && 'alfrescoARM-ubuntu2404-16G-4CPU' || 'alfrescoPub-ubuntu2204-16G-4CPU' }}
     steps:
       - name: Setup cluster
-        uses: Alfresco/alfresco-build-tools/.github/actions/setup-kind@v5.35.0
+        uses: Alfresco/alfresco-build-tools/.github/actions/setup-kind@v7.1.0
         with:
           ingress-nginx-ref: controller-v1.8.2
           metrics: "true"
@@ -174,7 +174,7 @@ jobs:
           version: "3.15.2"
 
       - name: Login to Quay.io
-        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20  # v3.1.0
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567  # v3.3.0
         with:
           registry: quay.io
           username: ${{ secrets.QUAY_USERNAME }}
diff --git a/.github/workflows/kics.yml b/.github/workflows/kics.yml
index 0754bcbb..dc8fc3aa 100644
--- a/.github/workflows/kics.yml
+++ b/.github/workflows/kics.yml
@@ -27,6 +27,6 @@ jobs:
           disable_secrets: true
       - name: Upload SARIF file # Remove 'if' statement after making repo public; also add 'output_formats: 'sarif'' to the KICS action
         if: false 
-        uses: github/codeql-action/upload-sarif@323f5ef653b88011bf10e9a0a56d70d742463c9a # v3.26.8
+        uses: github/codeql-action/upload-sarif@cf5b0a9041d3c1d336516f1944c96d96598193cc # v3.26.8
         with:
           sarif_file: report-dir/results.sarif
diff --git a/.github/workflows/test-make.yml b/.github/workflows/test-make.yml
index fe9c3719..b8869357 100644
--- a/.github/workflows/test-make.yml
+++ b/.github/workflows/test-make.yml
@@ -22,7 +22,7 @@ jobs:
   make-test:
     runs-on: ubuntu-latest
     steps:
-      - uses: Alfresco/alfresco-build-tools/.github/actions/free-hosted-runner-disk-space@v5.34.0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/free-hosted-runner-disk-space@v7.1.0
 
       - name: Setup nexus authentication
         run: |