diff --git a/.github/workflows/biome-lint.yml b/.github/workflows/biome-lint.yml
index 84c301aa..dc4b0fb4 100644
--- a/.github/workflows/biome-lint.yml
+++ b/.github/workflows/biome-lint.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       # Checkout the repository so the workflow has access to the code
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
 
       # Run the run-biome.sh script
       - name: Run run-biome.sh
diff --git a/.github/workflows/build-push.yml b/.github/workflows/build-push.yml
index d4229e3c..0a02520e 100644
--- a/.github/workflows/build-push.yml
+++ b/.github/workflows/build-push.yml
@@ -15,7 +15,7 @@ env:
 
 jobs:
     deploy-example-site:
-      uses: nginxinc/docs-actions/.github/workflows/docs-build-push.yml@87da99295dcb424d92efb2f6d783cc02e7c8da43 # v1.0.15
+      uses: nginxinc/docs-actions/.github/workflows/docs-build-push.yml@943cc24d476b175ae36585cb815d574b52a6edcc # v1.1.0
       with:
         production_url_path: "/nginx-hugo-theme"
         preview_url_path: "/previews/nginx-hugo-theme"
@@ -34,12 +34,12 @@ jobs:
       needs: deploy-example-site
       runs-on: ubuntu-22.04
       steps:
-        - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
           with:
             ref: ${{ github.event.workflow_run.head_branch }}
-        - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
           with:
-            node-version: 24.14.0
+            node-version: 24.22.2
         - name: Installing packages
           run: cd performance && npm ci
         - name: Generating lighthouse reports for PR...
@@ -116,7 +116,7 @@ jobs:
                     fi
                   fi
               done
-        - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
           if: ${{ !cancelled() }}
           with:
               name: lighthouse-reports-pr
diff --git a/.github/workflows/example-site-deploy.yml b/.github/workflows/example-site-deploy.yml
index 7a03ec54..b8e0cc55 100644
--- a/.github/workflows/example-site-deploy.yml
+++ b/.github/workflows/example-site-deploy.yml
@@ -28,17 +28,17 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Setup Go
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version: ${{ env.GO_VERSION }}
           cache: false
       - name: Setup Hugo
-        uses: peaceiris/actions-hugo@75d2e84710de30f6ff7268e08f310b60ef14033f #v3.0.0
+        uses: peaceiris/actions-hugo@2752ce1d29631191ea3f27c23495fa06139a5b78 # v3.2.1
         with:
           hugo-version: ${{ env.HUGO_VERSION }}
           extended: true
       - name: Checkout repo
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           fetch-depth: 0
       - name: Build exampleSite
diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml
index 2ff1b21c..d92b1510 100644
--- a/.github/workflows/fossa.yml
+++ b/.github/workflows/fossa.yml
@@ -22,9 +22,9 @@ jobs:
     if: ${{ github.event.repository.fork == false }}
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
 
       - name: Scan
-        uses: fossas/fossa-action@c414b9ad82eaad041e47a7cf62a4f02411f427a0 # v1.8.0
+        uses: fossas/fossa-action@ff70fe9fe17cbd2040648f1c45e8ec4e4884dcf3 # v1.9.0
         with:
           api-key: ${{ secrets.FOSSA_TOKEN }}
\ No newline at end of file
diff --git a/.github/workflows/lighthouse.yml b/.github/workflows/lighthouse.yml
index 895390c4..b4fe37c7 100644
--- a/.github/workflows/lighthouse.yml
+++ b/.github/workflows/lighthouse.yml
@@ -17,12 +17,12 @@ jobs:
   generate-lighthouse-report:
     runs-on: ubuntu-22.04
     steps:
-        - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
           with:
             ref: ${{ github.event.workflow_run.head_branch }}
-        - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
           with:
-            node-version: 24.14.0
+            node-version: 24.22.2
         - name: Installing packages
           run: cd performance && npm ci
         - name: Get PR number being merged
@@ -43,7 +43,7 @@ jobs:
             GITHUB_PR_NUMBER: ${{ env.GITHUB_PR_NUMBER }}
           run: |
             node performance/lighthouse-script.js
-        - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
           with:
             name: lighthouse-reports-main
             path: lighthouse-reports/main-report.json
diff --git a/.github/workflows/mend.yml b/.github/workflows/mend.yml
index 17577eae..f54cc55e 100644
--- a/.github/workflows/mend.yml
+++ b/.github/workflows/mend.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           ref: ${{ inputs.branch && inputs.branch || github.ref }}
 
diff --git a/.github/workflows/nginx-documentation-build.yml b/.github/workflows/nginx-documentation-build.yml
index e9adbc55..71b41582 100644
--- a/.github/workflows/nginx-documentation-build.yml
+++ b/.github/workflows/nginx-documentation-build.yml
@@ -12,7 +12,7 @@ jobs:
 
     steps:
       - name: Checkout hugo theme
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           fetch-depth: 0 # This is required for hugo Lastmod to function properly
 
@@ -21,14 +21,14 @@ jobs:
           git clone https://github.com/nginx/documentation.git docs
 
       - name: Setup Go
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
-          go-version: "1.26.1"
+          go-version: "1.27.3"
 
       - name: Setup Hugo
-        uses: peaceiris/actions-hugo@75d2e84710de30f6ff7268e08f310b60ef14033f # v3.0.0
+        uses: peaceiris/actions-hugo@2752ce1d29631191ea3f27c23495fa06139a5b78 # v3.2.1
         with:
-          hugo-version: '0.147.8'
+          hugo-version: '0.169.0'
           extended: true
 
       - name: Build Hugo site
diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml
index c9105593..8c02295b 100644
--- a/.github/workflows/playwright.yml
+++ b/.github/workflows/playwright.yml
@@ -19,7 +19,7 @@ jobs:
           version: ${{ steps.get-playwright-version.outputs.version }}
         steps:
           - name: Checkout code
-            uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+            uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
           - name: Get version from package.json
             id: get-playwright-version
             run: |
@@ -37,15 +37,15 @@ jobs:
         steps: 
           # Checkout the repository so the workflow has access to the code
           - name: Checkout code
-            uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+            uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
           - name: Setup Hugo
-            uses: peaceiris/actions-hugo@75d2e84710de30f6ff7268e08f310b60ef14033f # v3.0.0
+            uses: peaceiris/actions-hugo@2752ce1d29631191ea3f27c23495fa06139a5b78 # v3.2.1
             with:
-                hugo-version: '0.147.8'
+                hugo-version: '0.169.0'
                 extended: true
-          - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+          - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
             with: 
-              go-version: '1.26.1'
+              go-version: '1.27.3'
           - name: Install dependencies
             run: cd tests && npm ci
           - name: Run Playwright tests
@@ -61,7 +61,7 @@ jobs:
                 echo "Playwright tests failed. Please view the Playwright report to see full error."
                 exit 1
               fi
-          - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+          - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
             id: artifact-upload
             if: ${{ !cancelled() && failure() && steps.test-ui.conclusion == 'failure' }}
             with: