diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2af0c682f725..520b8b40ec25 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -157,7 +157,7 @@ jobs:
       image: rocm/mlir:rocm7.2-latest
       options: --user root
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262  # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         if: needs.relevant-changes.outputs.relevant != 'false'
         with:
           # Full history is required for git-restore-mtime below (mtimes
@@ -238,7 +238,7 @@ jobs:
       - name: Restore CMake build directory cache
         id: cpp-cache
         if: needs.relevant-changes.outputs.relevant != 'false'
-        uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830  # v4.3.0
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
         with:
           path: build
           # ext SHA prefix locks the cache to the current external/ state.
@@ -346,7 +346,7 @@ jobs:
           needs.relevant-changes.outputs.relevant != 'false'
           && github.event_name != 'pull_request'
           && steps.cpp-cache.outputs.cache-hit != 'true'
-        uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830  # v4.3.0
+        uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
         with:
           path: build
           key: ${{ steps.cpp-cache.outputs.cache-primary-key }}
@@ -364,7 +364,7 @@ jobs:
       image: python:3.10
       options: --user root
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262  # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         if: needs.relevant-changes.outputs.relevant != 'false'
         with:
           fetch-depth: 0
@@ -453,7 +453,7 @@ jobs:
       image: python:3.10
       options: --user root
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262  # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         if: needs.relevant-changes.outputs.relevant != 'false'
         with:
           fetch-depth: 0
diff --git a/.github/workflows/claude_auto_review.yml b/.github/workflows/claude_auto_review.yml
index 0976f8c07d83..f5fa666d590a 100644
--- a/.github/workflows/claude_auto_review.yml
+++ b/.github/workflows/claude_auto_review.yml
@@ -134,7 +134,7 @@ jobs:
       # this repo). See doc §8.
       - name: Checkout PR head
         id: checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           ref: ${{ github.event.pull_request.head.sha || format('refs/pull/{0}/head', steps.pr-validate.outputs.pr_number) }}
           fetch-depth: 1
@@ -266,7 +266,7 @@ jobs:
       # stay contents:read. See doc §11.
       - name: Generate App token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510  # v3.3.0
         with:
           # Client ID stored as a variable (non-sensitive, public install URL);
           # private key as a secret. The variable NAME is historical.
@@ -537,7 +537,7 @@ jobs:
       # upstream supply-chain compromise. See doc §8, §13.
       - name: Run Claude review
         id: claude-code
-        uses: anthropics/claude-code-action@51ea8ea73a139f2a74ff649e3092c25a904aed7e  # v1
+        uses: anthropics/claude-code-action@1d6de8cb0c237e7c15e9e1bdf973826ebae490cc  # v1
         timeout-minutes: 20
         env:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
@@ -918,7 +918,7 @@ jobs:
         run: bash .github/scripts/sanitize_claude_actions.sh /tmp/pr/actions.json
 
       - name: Upload review artifacts
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9  # v7.0.2
         with:
           name: claude-review-actions
           path: |
@@ -987,7 +987,7 @@ jobs:
       # copy, which (running with the write-capable App token) could post
       # arbitrary comments/labels. See doc §8.
       - name: Checkout default branch (for post script)
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           ref: ${{ github.event.repository.default_branch }}
           sparse-checkout: |
@@ -995,7 +995,7 @@ jobs:
           persist-credentials: false
 
       - name: Download review artifacts
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131  # v7.0.0
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333  # v8.0.2
         with:
           name: claude-review-actions
           path: /tmp/pr
@@ -1004,7 +1004,7 @@ jobs:
       # (job outputs aren't encrypted). See doc §11.
       - name: Generate App token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510  # v3.3.0
         with:
           client-id: ${{ vars.ROCMLIR_PR_REVIEWER_APP_ID }}
           private-key: ${{ secrets.ROCMLIR_PR_REVIEWER_PRIVATE_KEY }}
@@ -1040,7 +1040,7 @@ jobs:
     steps:
       - name: Generate App token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510  # v3.3.0
         with:
           client-id: ${{ vars.ROCMLIR_PR_REVIEWER_APP_ID }}
           private-key: ${{ secrets.ROCMLIR_PR_REVIEWER_PRIVATE_KEY }}
diff --git a/.github/workflows/claude_auto_review_fork_notify.yml b/.github/workflows/claude_auto_review_fork_notify.yml
index 032841058575..8adf31744357 100644
--- a/.github/workflows/claude_auto_review_fork_notify.yml
+++ b/.github/workflows/claude_auto_review_fork_notify.yml
@@ -38,7 +38,7 @@ jobs:
       # App token so the comment posts under the consistent bot identity. §11.
       - name: Generate App token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510  # v3.3.0
         with:
           client-id: ${{ vars.ROCMLIR_PR_REVIEWER_APP_ID }}
           private-key: ${{ secrets.ROCMLIR_PR_REVIEWER_PRIVATE_KEY }}
diff --git a/.github/workflows/claude_auto_review_perimeter_banner.yml b/.github/workflows/claude_auto_review_perimeter_banner.yml
index 1c5ffde8c6a5..a98c70a08c97 100644
--- a/.github/workflows/claude_auto_review_perimeter_banner.yml
+++ b/.github/workflows/claude_auto_review_perimeter_banner.yml
@@ -49,7 +49,7 @@ jobs:
       # See doc §9, §11.
       - name: Generate App token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510  # v3.3.0
         with:
           client-id: ${{ vars.ROCMLIR_PR_REVIEWER_APP_ID }}
           private-key: ${{ secrets.ROCMLIR_PR_REVIEWER_PRIVATE_KEY }}
diff --git a/.github/workflows/claude_auto_review_sanitizer_tests.yml b/.github/workflows/claude_auto_review_sanitizer_tests.yml
index dc4d2a98ab4c..7d8833e16059 100644
--- a/.github/workflows/claude_auto_review_sanitizer_tests.yml
+++ b/.github/workflows/claude_auto_review_sanitizer_tests.yml
@@ -35,7 +35,7 @@ jobs:
       # sparse-checkout implicitly enables partial clone (--filter=blob:none),
       # so blobs outside the listed paths are never fetched.
       - name: Checkout PR
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           # merge_commit_sha is the tree the maintainer will merge -- the
           # right thing to test. It can be null while GitHub is still
diff --git a/.github/workflows/pr-security-scan.yml b/.github/workflows/pr-security-scan.yml
index 2ba2f5f53da8..c38bf28f20b0 100644
--- a/.github/workflows/pr-security-scan.yml
+++ b/.github/workflows/pr-security-scan.yml
@@ -29,7 +29,7 @@ concurrency:
 jobs:
   security:
     name: Security scan
-    uses: ROCm/rocm-security-gh/.github/workflows/security-baseline.yml@62c2c4f3effcd47711da28276815c90cb4aa6444 # v1.0.2
+    uses: ROCm/rocm-security-gh/.github/workflows/security-baseline.yml@86901f5856e12c7211bc04d012ce80ee9a02b4b5 # v1.0.5
     with:
       report_formats: human
       bandit_config_path: .github/scan_tools_configs/bandit.yml
diff --git a/.github/workflows/weekly-security-scan.yml b/.github/workflows/weekly-security-scan.yml
index 0ba132f60214..e55e93dac1a5 100644
--- a/.github/workflows/weekly-security-scan.yml
+++ b/.github/workflows/weekly-security-scan.yml
@@ -29,7 +29,7 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: ROCm/rocm-security-gh/.github/workflows/security-baseline.yml@62c2c4f3effcd47711da28276815c90cb4aa6444 # v1.0.2
+    uses: ROCm/rocm-security-gh/.github/workflows/security-baseline.yml@86901f5856e12c7211bc04d012ce80ee9a02b4b5 # v1.0.5
     with:
       scan_mode: all
       report_formats: sarif