diff --git a/.github/workflows/__main-ci.yml b/.github/workflows/__main-ci.yml
index 27f88b0..0ec81d5 100644
--- a/.github/workflows/__main-ci.yml
+++ b/.github/workflows/__main-ci.yml
@@ -35,7 +35,7 @@ jobs:
   release:
     needs: ci
     if: github.event_name != 'schedule'
-    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@b27c38015a8265780329d229c841d057a18b8fae # 0.25.0
+    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@84d583ba7b357f9476707f54cf5419d630ae0145 # 0.26.2
     permissions:
       contents: read
     with:
diff --git a/.github/workflows/__test-action-dependencies-cache.yml b/.github/workflows/__test-action-dependencies-cache.yml
index c672628..ef38521 100644
--- a/.github/workflows/__test-action-dependencies-cache.yml
+++ b/.github/workflows/__test-action-dependencies-cache.yml
@@ -29,7 +29,7 @@ jobs:
       # jscpd:ignore-start
 
       - name: Arrange - Checkout sources
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Arrange - Setup Node.js runtime
         id: arrange-setup-node
diff --git a/.github/workflows/__test-action-get-package-manager.yml b/.github/workflows/__test-action-get-package-manager.yml
index 87fb1be..90c8e5c 100644
--- a/.github/workflows/__test-action-get-package-manager.yml
+++ b/.github/workflows/__test-action-get-package-manager.yml
@@ -43,7 +43,7 @@ jobs:
             run-script-command: yarn
     steps:
       - name: Arrange - Checkout sources
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Act - Run "get-package-manager" action
         id: act-get-package-manager
diff --git a/.github/workflows/__test-action-has-installed-dependencies.yml b/.github/workflows/__test-action-has-installed-dependencies.yml
index a4dfdbf..b19133c 100644
--- a/.github/workflows/__test-action-has-installed-dependencies.yml
+++ b/.github/workflows/__test-action-has-installed-dependencies.yml
@@ -31,7 +31,7 @@ jobs:
             lock-file: yarn.lock
     steps:
       - name: Arrange - Checkout sources
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Arrange - Setup Node.js runtime
         id: arrange-setup-node
diff --git a/.github/workflows/__test-action-package.yml b/.github/workflows/__test-action-package.yml
index 4e9c108..cbb1133 100644
--- a/.github/workflows/__test-action-package.yml
+++ b/.github/workflows/__test-action-package.yml
@@ -29,7 +29,7 @@ jobs:
             artifact-suffix: yarn
     steps:
       - name: Arrange - Checkout sources
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Act - Run "package" action
         id: act-package
@@ -92,7 +92,7 @@ jobs:
             package-tarball-artifact-id: ${{ needs.test.outputs['package-tarball-artifact-id-yarn'] }}
     steps:
       - name: Arrange - Checkout sources
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Arrange - Configure Node.js version
         run: echo "lts/*" > .nvmrc
diff --git a/.github/workflows/__test-action-setup-node.yml b/.github/workflows/__test-action-setup-node.yml
index bb90d14..3cbfaf0 100644
--- a/.github/workflows/__test-action-setup-node.yml
+++ b/.github/workflows/__test-action-setup-node.yml
@@ -27,7 +27,7 @@ jobs:
             run-script-command: yarn
     steps:
       - name: Arrange - Checkout sources
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Arrange - Configure Node.js version
         run: echo "lts/*" > .nvmrc
diff --git a/.github/workflows/__test-workflow-continuous-integration.yml b/.github/workflows/__test-workflow-continuous-integration.yml
index 1b4f1c1..7217b89 100644
--- a/.github/workflows/__test-workflow-continuous-integration.yml
+++ b/.github/workflows/__test-workflow-continuous-integration.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: act-without-container
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           artifact-ids: ${{ needs.act-without-container.outputs.build-artifact-id }}
@@ -62,7 +62,7 @@ jobs:
       issues: read
       packages: write
       pull-requests: read
-    uses: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml@260358ba1fd405c57bc669823d89c625971a3431 # 0.34.2
+    uses: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml@77f98ab8773b824eca7ed3f94e3e9c8b8af5875c # 0.36.1
     with:
       sign: false
       images: |
@@ -102,7 +102,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: act-with-container
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           artifact-ids: ${{ needs.act-with-container.outputs.build-artifact-id }}
@@ -149,7 +149,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: act-with-container-advanced
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           artifact-ids: ${{ needs.act-with-container-advanced.outputs.build-artifact-id }}
diff --git a/.github/workflows/__test-workflow-release.yml b/.github/workflows/__test-workflow-release.yml
index ded89d8..0336f61 100644
--- a/.github/workflows/__test-workflow-release.yml
+++ b/.github/workflows/__test-workflow-release.yml
@@ -15,7 +15,7 @@ jobs:
       package-tarball-artifact-id: ${{ steps.package.outputs.package-tarball-artifact-id }}
     steps:
       - name: Arrange - Checkout sources
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - id: package
         name: Arrange - Create package tarball
diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index 7a0f343..b3b578a 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -294,10 +294,10 @@ jobs:
     runs-on: *ci-runner
     steps:
       - uses: hoverkraft-tech/ci-github-common/actions/checkout@b553a696531fbd36743ccbb0c76c717971b8acdb # 0.35.4
-      - uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+      - uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1
         with:
           languages: ${{ inputs.code-ql }}
-      - uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+      - uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1
 
   dependency-review:
     name: 🛡️ Dependency Review