diff --git a/.github/actions/prepare-ios-build/action.yaml b/.github/actions/prepare-ios-build/action.yaml
index 40568db65..de299f394 100644
--- a/.github/actions/prepare-ios-build/action.yaml
+++ b/.github/actions/prepare-ios-build/action.yaml
@@ -21,7 +21,7 @@ runs:
         echo "::endgroup::"
 
     - name: Cache Pods
-      uses: actions/cache@0c907a75c2c80ebcb7f088228285e798b750cf8f # v4.2.1
+      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
       with:
         path: Pods
         key: ${{ runner.os }}-pods-${{ hashFiles('**/Podfile.lock') }}
diff --git a/.github/actions/prepare-mobile-build/action.yaml b/.github/actions/prepare-mobile-build/action.yaml
index 6bd6f7406..e491af4d2 100644
--- a/.github/actions/prepare-mobile-build/action.yaml
+++ b/.github/actions/prepare-mobile-build/action.yaml
@@ -5,7 +5,7 @@ runs:
   using: composite
   steps:
     # The required ruby version is mentioned in '.ruby-version'
-    - uses: ruby/setup-ruby@32110d4e311bd8996b2a82bf2a43b714ccc91777 # v1.221.0
+    - uses: ruby/setup-ruby@eaecf785f6a34567a6d97f686bbb7bccc1ac1e5c # v1.237.0
 
     - name: ci/setup-fastlane-dependencies
       shell: bash
@@ -16,7 +16,7 @@ runs:
       working-directory: ./fastlane
 
     - name: Cache Ruby gems
-      uses: actions/cache@0c907a75c2c80ebcb7f088228285e798b750cf8f # v4.2.1
+      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
       with:
         path: vendor/bundle
         key: ${{ runner.os }}-gems-${{ hashFiles('**/Gemfile.lock') }}
diff --git a/.github/actions/prepare-node-deps/action.yaml b/.github/actions/prepare-node-deps/action.yaml
index 74c6f7460..708c569b6 100644
--- a/.github/actions/prepare-node-deps/action.yaml
+++ b/.github/actions/prepare-node-deps/action.yaml
@@ -5,7 +5,7 @@ runs:
   using: composite
   steps:
     - name: ci/setup-node
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version-file: ".nvmrc"
         cache: "npm"
@@ -22,7 +22,7 @@ runs:
         echo "::endgroup::"
 
     - name: Cache Node.js modules
-      uses: actions/cache@0c907a75c2c80ebcb7f088228285e798b750cf8f # v4.2.1
+      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
       with:
         path: ~/.npm
         key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
diff --git a/.github/actions/test-coverage/action.yml b/.github/actions/test-coverage/action.yml
index 7deab32cc..2d5088f06 100644
--- a/.github/actions/test-coverage/action.yml
+++ b/.github/actions/test-coverage/action.yml
@@ -23,7 +23,7 @@ runs:
     - name: ci/get-last-run-id
       if: github.event_name == 'pull_request'
       id: get-last-run-id
-      uses: actions/cache/restore@0c907a75c2c80ebcb7f088228285e798b750cf8f
+      uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684
       continue-on-error: true
       with:
         path: run-id.txt
@@ -140,7 +140,7 @@ runs:
 
     - name: ci/cache-run-id-file
       if: env.UPLOAD_SUCCESS == 'true'
-      uses: actions/cache/save@0c907a75c2c80ebcb7f088228285e798b750cf8f
+      uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684
       with:
         path: run-id.txt
         key: last-run-id-${{ inputs.run_id }}
diff --git a/.github/workflows/e2e-android-template.yml b/.github/workflows/e2e-android-template.yml
index 42d05c2ec..29613518d 100644
--- a/.github/workflows/e2e-android-template.yml
+++ b/.github/workflows/e2e-android-template.yml
@@ -313,7 +313,7 @@ jobs:
 
       - name: Comment report on the PR
         if: ${{ github.event_name == 'pull_request' }}
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           script: |
             const prNumber = context.payload.pull_request.number;
diff --git a/.github/workflows/e2e-detox-pr.yml b/.github/workflows/e2e-detox-pr.yml
index b8878dab8..040814aa2 100644
--- a/.github/workflows/e2e-detox-pr.yml
+++ b/.github/workflows/e2e-detox-pr.yml
@@ -178,7 +178,7 @@ jobs:
       - run-ios-tests-on-pr
     steps:
       - name: e2e/remove-label-from-pr
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@e7aeb8c663f696059ebb5f9ab1425ed2ef511bdb # v7.0.1
         continue-on-error: true # Label might have been removed manually
         with:
           script: |
@@ -200,7 +200,7 @@ jobs:
       - run-android-tests-on-pr
     steps:
       - name: e2e/remove-label-from-pr
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@e7aeb8c663f696059ebb5f9ab1425ed2ef511bdb # v7.0.1
         continue-on-error: true # Label might have been removed manually
         with:
           script: |
diff --git a/.github/workflows/e2e-ios-template.yml b/.github/workflows/e2e-ios-template.yml
index 260f79c06..5944b290a 100644
--- a/.github/workflows/e2e-ios-template.yml
+++ b/.github/workflows/e2e-ios-template.yml
@@ -310,7 +310,7 @@ jobs:
 
       - name: Comment report on the PR
         if: ${{ github.event_name == 'pull_request' }}
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           script: |
             const prNumber = context.payload.pull_request.number;
diff --git a/.github/workflows/github-release.yml b/.github/workflows/github-release.yml
index f90e2940d..c71368b08 100644
--- a/.github/workflows/github-release.yml
+++ b/.github/workflows/github-release.yml
@@ -170,7 +170,7 @@ jobs:
       - name: ci/checkout-repo
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: ruby/setup-ruby@e5ac7b085f6e63d49c8973eb0c6e04d876b881f1 # v1.230.0
+      - uses: ruby/setup-ruby@eaecf785f6a34567a6d97f686bbb7bccc1ac1e5c # v1.237.0
 
       - name: release/setup-fastlane-dependencies
         run: bundle install