diff --git a/.github/actions/composite/setupNode/action.yml b/.github/actions/composite/setupNode/action.yml
index 00fb5d7283f3a..311bcd6990d1a 100644
--- a/.github/actions/composite/setupNode/action.yml
+++ b/.github/actions/composite/setupNode/action.yml
@@ -19,23 +19,25 @@ runs:
       shell: bash
       run: jq 'del(.version, .packages[""].version)' package-lock.json > normalized-package-lock.json
 
-    - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e #v4
+    - id: setup-node
+      # v6.1.0
+      uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
       with:
         node-version-file: '.nvmrc'
-        cache: npm
+        cache: 'npm'
         cache-dependency-path: normalized-package-lock.json
 
     - id: cache-node-modules
-      # v4
-      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57
+      # v5.0.1
+      uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb
       with:
         path: node_modules
         key: ${{ inputs.IS_HYBRID_BUILD == 'true' && format('{0}-node-modules-{1}', runner.os, hashFiles('package-lock.json', 'patches/**', 'Mobile-Expensify/patches/**')) || format('{0}-node-modules-{1}', runner.os, hashFiles('package-lock.json', 'patches/**'))}}
     
     - id: cache-old-dot-node-modules
       if: inputs.IS_HYBRID_BUILD == 'true'
-      # v4
-      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57
+      # v5.0.1
+      uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb
       with:
         path: Mobile-Expensify/node_modules
         key: ${{ runner.os }}-node-modules-${{ hashFiles('Mobile-Expensify/package-lock.json', 'Mobile-Expensify/patches/**') }}
diff --git a/.github/workflows/cspell.yml b/.github/workflows/cspell.yml
index 4cad8725e66e3..7b9e1513ff809 100644
--- a/.github/workflows/cspell.yml
+++ b/.github/workflows/cspell.yml
@@ -19,8 +19,8 @@ jobs:
         run: jq 'del(.version, .packages[""].version)' package-lock.json > normalized-package-lock.json
 
       - name: Restore cspell cache
-        # v4
-        uses: actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57
+        # v5.0.1
+        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb
         with:
           path: .cspellcache
           key: cspell-${{ runner.os }}-${{ hashFiles('cspell.json', 'normalized-package-lock.json') }}-${{ github.sha }}
@@ -48,7 +48,7 @@ jobs:
 
       - name: Save cspell cache
         # v4
-        uses: actions/cache/save@1bd1e32a3bdc45362d1e726936510720a7c30a57
+        uses: actions/cache/save@9255dc7a253b0ccc959486e2bca901246202afeb
         if: always()
         with:
           path: .cspellcache
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 12044de11aff8..5a7ba62179b8a 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -327,8 +327,8 @@ jobs:
         run: bundle install
 
       - name: Cache Pod dependencies
-        # v4
-        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57
+        # v5.0.1
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb
         id: pods-cache
         with:
           path: Mobile-Expensify/iOS/Pods
diff --git a/.github/workflows/deployNewHelp.yml b/.github/workflows/deployNewHelp.yml
index 2087a27702601..2b8f0bb0ca7bf 100644
--- a/.github/workflows/deployNewHelp.yml
+++ b/.github/workflows/deployNewHelp.yml
@@ -55,8 +55,8 @@ jobs:
 
       # Install Node for _scripts/*.js
       - name: Set up Node.js
-        # v4
-        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e
+        # v6.0.1
+        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
         with:
           node-version-file: '.nvmrc'
 
diff --git a/.github/workflows/lint-changed.yml b/.github/workflows/lint-changed.yml
index fd2c752d1ad46..3d9c9a1c2dade 100644
--- a/.github/workflows/lint-changed.yml
+++ b/.github/workflows/lint-changed.yml
@@ -60,8 +60,8 @@ jobs:
         run: jq 'del(.version, .packages[""].version)' package-lock.json > normalized-package-lock.json
 
       - name: Restore ESLint cache
-        # v4
-        uses: actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57
+        # v5.0.1
+        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb
         with:
           path: node_modules/.cache/eslint-changed
           key: ${{ runner.os }}-eslint-changed-${{ hashFiles('eslint.changed.config.*', 'normalized-package-lock.json') }}-${{ github.sha }}
@@ -81,8 +81,8 @@ jobs:
           fi
 
       - name: Save ESLint cache
-        # v4
-        uses: actions/cache/save@1bd1e32a3bdc45362d1e726936510720a7c30a57
+        # v5.0.1
+        uses: actions/cache/save@9255dc7a253b0ccc959486e2bca901246202afeb
         if: always()
         with:
           path: node_modules/.cache/eslint-changed
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 2477c9bc58e4e..f1afd145358e2 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -29,8 +29,8 @@ jobs:
         run: jq 'del(.version, .packages[""].version)' package-lock.json > normalized-package-lock.json
 
       - name: Restore ESLint cache
-        # v4
-        uses: actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57
+        # v5.0.1
+        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb
         with:
           path: node_modules/.cache/eslint
           key: ${{ runner.os }}-eslint-${{ hashFiles('eslint.config.*', 'normalized-package-lock.json') }}-${{ github.sha }}
@@ -52,8 +52,8 @@ jobs:
           CI: true
 
       - name: Save ESLint cache
-        # v4
-        uses: actions/cache/save@1bd1e32a3bdc45362d1e726936510720a7c30a57
+        # v5.0.1
+        uses: actions/cache/save@9255dc7a253b0ccc959486e2bca901246202afeb
         if: always()
         with:
           path: node_modules/.cache/eslint
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index dbeb2b1ef58f8..0bc5aedb6814e 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -37,8 +37,8 @@ jobs:
 
       - name: Cache Jest cache
         id: cache-jest-cache
-        # v4
-        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57
+        # v5.0.1
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb
         with:
           path: .jest-cache
           key: ${{ runner.os }}-jest
diff --git a/.github/workflows/verifyHybridApp.yml b/.github/workflows/verifyHybridApp.yml
index b4e9a4def1ac9..09fb79f8f6d68 100644
--- a/.github/workflows/verifyHybridApp.yml
+++ b/.github/workflows/verifyHybridApp.yml
@@ -141,8 +141,8 @@ jobs:
           bundler-cache: true
 
       - name: Cache Pod dependencies
-        # v4
-        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57
+        # v5.0.1
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb
         id: pods-cache
         with:
           path: Mobile-Expensify/iOS/Pods