From 638ef5da056dcc2b058b7e6a1bb26ccf6378ae11 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 18 Mar 2026 23:47:08 +0000
Subject: [PATCH] build(deps): bump the dependencies group across 46
 directories with 13 updates

Updates the requirements on [actions/checkout](https://github.com/actions/checkout), [envoyproxy/toolshed](https://github.com/envoyproxy/toolshed), [actions/upload-artifact](https://github.com/actions/upload-artifact), [github/codeql-action](https://github.com/github/codeql-action), [actions/setup-python](https://github.com/actions/setup-python), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [actions/setup-node](https://github.com/actions/setup-node), [actions-rust-lang/setup-rust-toolchain](https://github.com/actions-rust-lang/setup-rust-toolchain), [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request), [actions/cache](https://github.com/actions/cache), [actions/setup-java](https://github.com/actions/setup-java), [crazy-max/ghaction-import-gpg](https://github.com/crazy-max/ghaction-import-gpg) and [actions/download-artifact](https://github.com/actions/download-artifact) to permit the latest version.

Updates `actions/checkout` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/8e8c483db84b4bee98b60c0593521ed34d9990e8...de0fac2e4500dabe0009e67214ff5f5447ce83dd)

Updates `envoyproxy/toolshed` to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `actions/upload-artifact` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f)

Updates `github/codeql-action` from 4.31.10 to 4.33.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/cdefb33c0f6224e58673d9004f47f7cb3e328b89...b1bff81932f5cdfc8695c7752dcee935dcd061c8)

Updates `actions/setup-python` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/83679a892e2d95755f2dac6acb0bfd1e9ac5d548...a309ff8b426b58ec0e2a45f0f869d46889d02405)

Updates `docker/setup-buildx-action` from 3.12.0 to 4.0.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/8d2750c68a42422c14e847fe6c8ac0403b4cbd6f...4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd)

Updates `actions/setup-node` from 6.1.0 to 6.3.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/395ad3262231945c25e8478fd5baf05154b1d79f...53b83947a5a98c8d113130e565377fae1a50d02f)

Updates `actions-rust-lang/setup-rust-toolchain` from 1.15.2 to 1.15.4
- [Release notes](https://github.com/actions-rust-lang/setup-rust-toolchain/releases)
- [Changelog](https://github.com/actions-rust-lang/setup-rust-toolchain/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions-rust-lang/setup-rust-toolchain/compare/1780873c7b576612439a134613cc4cc74ce5538c...150fca883cd4034361b621bd4e6a9d34e5143606)

Updates `peter-evans/create-pull-request` from 8.0.0 to 8.1.0
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/98357b18bf14b5342f975ff684046ec3b2a07725...c0f553fe549906ede9cf27b5156039d195d2ece0)

Updates `actions/checkout` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/8e8c483db84b4bee98b60c0593521ed34d9990e8...de0fac2e4500dabe0009e67214ff5f5447ce83dd)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `actions/cache` from 5.0.1 to 5.0.4
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/9255dc7a253b0ccc959486e2bca901246202afeb...668228422ae6a00e4ad889ee87cd7109ec5666a7)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `actions/cache` from 5.0.1 to 5.0.4
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/9255dc7a253b0ccc959486e2bca901246202afeb...668228422ae6a00e4ad889ee87cd7109ec5666a7)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `actions/setup-java` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/f2beeb24e141e01a676f977032f5a29d81c9e27e...be666c2fcd27ec809703dec50e508c2fdc7f6654)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `actions/setup-python` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/83679a892e2d95755f2dac6acb0bfd1e9ac5d548...a309ff8b426b58ec0e2a45f0f869d46889d02405)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `actions/checkout` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/8e8c483db84b4bee98b60c0593521ed34d9990e8...de0fac2e4500dabe0009e67214ff5f5447ce83dd)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `actions/upload-artifact` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `actions/upload-artifact` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f)

Updates `actions/checkout` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/8e8c483db84b4bee98b60c0593521ed34d9990e8...de0fac2e4500dabe0009e67214ff5f5447ce83dd)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `crazy-max/ghaction-import-gpg` from 6.3.0 to 7.0.0
- [Release notes](https://github.com/crazy-max/ghaction-import-gpg/releases)
- [Commits](https://github.com/crazy-max/ghaction-import-gpg/compare/e89d40939c28e39f97cf32126055eeae86ba74ec...2dc316deee8e90f13e1a351ab510b4d5bc0c82cd)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `actions/download-artifact` from 7.0.0 to 8.0.1
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/37930b1c2abaa49bbe596cd826c3c89aef350131...3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `actions/upload-artifact` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

Updates `envoyproxy/toolshed` from d10938876b114aa2a001b43b43158f1bf7008f1a to 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits/5e0c5734ee7fc8a30629bd3f54fc910f92285bbe)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: github/codeql-action
  dependency-version: 4.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: actions/setup-python
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: actions/setup-node
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: actions-rust-lang/setup-rust-toolchain
  dependency-version: 1.15.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: actions/cache
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: actions/cache
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: actions/setup-java
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: actions/setup-python
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: crazy-max/ghaction-import-gpg
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: actions/download-artifact
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: envoyproxy/toolshed
  dependency-version: 5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
  dependency-type: direct:production
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/_bazel.yml                  | 10 ++--
 .github/workflows/_bazel_registry.yml         | 12 ++---
 .github/workflows/_publish_release.yml        | 12 ++---
 .github/workflows/_release.yml                | 26 +++++------
 .github/workflows/actions.yml                 |  8 ++--
 .github/workflows/bazel-registry.yml          |  4 +-
 .github/workflows/bazel.yml                   |  4 +-
 .github/workflows/codeql.yml                  |  8 ++--
 .github/workflows/copilot-setup-steps.yml     |  4 +-
 .github/workflows/docker.yml                  |  8 ++--
 .github/workflows/jq.yml                      |  4 +-
 .github/workflows/js.yml                      |  6 +--
 .github/workflows/lint.yml                    |  4 +-
 .github/workflows/publishing.yml              |  2 +-
 .github/workflows/py.yml                      | 26 +++++------
 .github/workflows/releasing.yml               |  2 +-
 .github/workflows/rust.yml                    | 12 ++---
 .github/workflows/scorecard.yml               |  6 +--
 .github/workflows/sh.yml                      |  4 +-
 .github/workflows/update-versions.yml         |  4 +-
 actions/azp/agent-cleanup/action.yml          |  6 +--
 actions/bind-mounts/action.yml                |  2 +-
 actions/bson/action.yml                       |  4 +-
 actions/buildah/action.yml                    |  2 +-
 actions/cache/prime/action.yml                | 22 ++++-----
 actions/cache/restore/action.yml              |  6 +--
 actions/docker/cache/prime/action.yml         |  2 +-
 actions/docker/cache/restore/action.yml       |  2 +-
 actions/docker/fetch/action.yml               |  2 +-
 actions/docker/shas/action.yml                |  6 +--
 actions/envoy/android/pre/action.yml          |  2 +-
 actions/envoy/ci/env/action.yml               | 12 ++---
 actions/envoy/ci/request/action.yml           | 20 ++++----
 actions/envoy/run/summary/action.yml          |  8 ++--
 actions/foreach/action.yml                    |  8 ++--
 actions/gcp/setup/action.yml                  |  4 +-
 actions/gcs/fuse/action.yml                   |  6 +--
 actions/github/afterall/action.yml            |  4 +-
 .../github/artifact/cache/restore/action.yml  |  2 +-
 actions/github/checkout/action.yml            | 12 ++---
 actions/github/command/action.yml             |  2 +-
 actions/github/env/load/action.yml            |  8 ++--
 actions/github/env/save/action.yml            |  4 +-
 actions/github/env/summary/action.yml         | 12 ++---
 actions/github/issue/get/action.yml           |  2 +-
 actions/github/merge-commit/action.yml        |  4 +-
 actions/github/pr/action.yml                  |  4 +-
 actions/github/release/action.yml             |  6 +--
 actions/github/release/artifacts/action.yml   | 14 +++---
 actions/github/release/latest/action.yml      |  2 +-
 actions/github/release/publish/action.yml     |  6 +--
 actions/github/release/shas/action.yml        |  2 +-
 actions/github/release/status/action.yml      | 10 ++--
 actions/github/run/action.yml                 | 46 +++++++++----------
 actions/github/should-run/action.yml          | 10 ++--
 actions/gpg/action.yml                        |  4 +-
 actions/gpg/import/action.yml                 |  4 +-
 actions/json/table/action.yml                 |  4 +-
 actions/oci/collector/action.yml              |  6 +--
 actions/regctl/install/action.yml             |  2 +-
 actions/source/action.yml                     |  2 +-
 actions/test-runner/action.yml                |  4 +-
 actions/upload/diff/action.yml                |  2 +-
 actions/using/recurse/action.yml              |  2 +-
 actions/version/action.yml                    |  2 +-
 65 files changed, 231 insertions(+), 231 deletions(-)

diff --git a/.github/workflows/_bazel.yml b/.github/workflows/_bazel.yml
index 2ab1ca9958..45d710494d 100644
--- a/.github/workflows/_bazel.yml
+++ b/.github/workflows/_bazel.yml
@@ -42,7 +42,7 @@ jobs:
     name: Bazel (${{ inputs.action }})
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
     - name: Setup Bazel
       uses: bazelbuild/setup-bazelisk@b39c379c82683a5f25d34f0d062761f62693e0b2  # v3
     - name: Install libtinfo5
@@ -64,7 +64,7 @@ jobs:
         inputs.action == 'build'
         && inputs.bazel-path == 'bazel'
         && inputs.upload
-      uses: envoyproxy/toolshed/actions/source@b947ebfe9eda97a0da3e1b3a6a3598fbb55de7b6
+      uses: envoyproxy/toolshed/actions/source@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         output-name: toolshed-bazel-v{version}.tar.gz
         source-path: bazel/
@@ -72,7 +72,7 @@ jobs:
         version-file: bazel/VERSION.txt
     - name: Bazel source
       if: ${{ steps.source-tarball.outputs.tarball }}
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f  # v7.0.0
       with:
         name: bazel-source
         path: ${{ steps.source-tarball.outputs.tarball }}
@@ -83,7 +83,7 @@ jobs:
         inputs.action == 'build'
         && inputs.artifacts
         && inputs.upload
-      uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         input: ${{ inputs.artifacts }}
         input-format: text
@@ -93,7 +93,7 @@ jobs:
           | "${{ inputs.bazel-path }}/bazel-bin/\(.)"
     - name: Bazel artifacts
       if: ${{ inputs.upload && (steps.artifact-paths.outputs.value || steps.source-tarball.outputs.tarball) }}
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f  # v7.0.0
       with:
         name: bazel-artifacts
         path: |
diff --git a/.github/workflows/_bazel_registry.yml b/.github/workflows/_bazel_registry.yml
index 35e1b4c095..9627fa1b9f 100644
--- a/.github/workflows/_bazel_registry.yml
+++ b/.github/workflows/_bazel_registry.yml
@@ -39,8 +39,8 @@ jobs:
     outputs:
       versions: ${{ steps.versions.outputs.value }}
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
-    - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+    - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: versions
       with:
         input: ${{ inputs.modules-root }}/modules/${{ inputs.module }}/${{ inputs.metadata }}
@@ -61,13 +61,13 @@ jobs:
       matrix:
         version: ${{ fromJSON(needs.module.outputs.versions) }}
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
-    - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+    - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         input: ${{ inputs.modules-root }}/modules/${{ inputs.module }}/${{ matrix.version }}/${{ inputs.source }}
         input-format: json-path
         print-result: true
-    - uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: source
       with:
         input: ${{ inputs.modules-root }}/modules/${{ inputs.module }}/${{ matrix.version }}/${{ inputs.source }}
@@ -84,7 +84,7 @@ jobs:
           split("\n")
           | map(select(length > 0) | split(" ") | {key: .[0], value: .[1]})
           | from_entries
-    - uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         input: ${{ inputs.modules-root }}/modules/${{ inputs.module }}/${{ matrix.version }}/${{ inputs.source }}
         input-format: json-path
diff --git a/.github/workflows/_publish_release.yml b/.github/workflows/_publish_release.yml
index 919fa34378..8d45b161f8 100644
--- a/.github/workflows/_publish_release.yml
+++ b/.github/workflows/_publish_release.yml
@@ -73,7 +73,7 @@ jobs:
     name: release (${{ inputs.name }})
     runs-on: ubuntu-24.04
     steps:
-    - uses: envoyproxy/toolshed/actions/appauth@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/appauth@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: appauth
       name: Appauth
       if: >-
@@ -84,7 +84,7 @@ jobs:
         key: ${{ secrets.app-key }}
     - id: checkout
       name: Checkout the repository
-      uses: envoyproxy/toolshed/actions/github/checkout@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/github/checkout@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         branch: main
         committer-name: ${{ inputs.committer-name }}
@@ -95,7 +95,7 @@ jobs:
         token: ${{ steps.appauth.outputs.token }}
 
     - if: inputs.dry-run
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
       with:
         path: temprepo
     - if: inputs.dry-run
@@ -106,13 +106,13 @@ jobs:
       id: gpg
       if: >-
         inputs.artifacts
-      uses: envoyproxy/toolshed/actions/gpg@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/gpg@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         gpg-key: ${{ ! inputs.dry-run && secrets.gpg-key || '' }}
         gpg-password: ${{ ! inputs.dry-run && secrets.gpg-password || '' }}
     - name: Release title (eg commit message)
       id: title
-      uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         options: -sRr
         input: |
@@ -121,7 +121,7 @@ jobs:
           split("\n") | first
 
     - name: Publish the release
-      uses: envoyproxy/toolshed/actions/github/release@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/github/release@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         artifact-workflows: ${{ inputs.artifact-workflows }}
         artifacts: ${{ inputs.artifacts }}
diff --git a/.github/workflows/_release.yml b/.github/workflows/_release.yml
index 1c2838b7f0..22eedaf1fd 100644
--- a/.github/workflows/_release.yml
+++ b/.github/workflows/_release.yml
@@ -80,7 +80,7 @@ jobs:
     name: ${{ inputs.action }}
     runs-on: ubuntu-24.04
     steps:
-    - uses: envoyproxy/toolshed/actions/appauth@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/appauth@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: appauth
       name: Appauth
       if: >-
@@ -90,7 +90,7 @@ jobs:
         key: ${{ secrets.app-key }}
     - id: checkout
       name: Checkout the repository
-      uses: envoyproxy/toolshed/actions/github/checkout@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/github/checkout@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         branch: main
         committer-name: ${{ inputs.committer-name }}
@@ -99,7 +99,7 @@ jobs:
         token: ${{ steps.appauth.outputs.token }}
     - name: Get version file
       id: version-file
-      uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         input: |
           actions: actions/VERSION.txt
@@ -111,11 +111,11 @@ jobs:
         filter: .["${{ inputs.type }}"]
     - name: Get version info
       id: version
-      uses: envoyproxy/toolshed/actions/version@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/version@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         version-file: ${{ steps.version-file.outputs.value }}
     - name: Update version file
-      uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       if: >-
         inputs.action != 'prepare'
       with:
@@ -148,7 +148,7 @@ jobs:
 
     # BAZEL ONLY
     - name: Get latest bins release (for bazel)
-      uses: envoyproxy/toolshed/actions/github/release/latest@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/github/release/latest@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: bins-version
       if: >-
         inputs.type == 'bazel'
@@ -156,7 +156,7 @@ jobs:
       with:
         pattern: ^bins-
     - name: Get SHAs for latest bins release (for bazel)
-      uses: envoyproxy/toolshed/actions/github/release/shas@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/github/release/shas@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: bins-shas
       if: >-
         inputs.type == 'bazel'
@@ -164,7 +164,7 @@ jobs:
       with:
         tag: ${{ steps.bins-version.outputs.tag }}
     - name: Get current SHAs and version (for bazel)
-      uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: bins-deps
       if: >-
         inputs.type == 'bazel'
@@ -179,7 +179,7 @@ jobs:
           bash::output
         options: -sRr
     - name: Update bins shas (for bazel)
-      uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: bins-updates
       if: >-
         inputs.type == 'bazel'
@@ -264,7 +264,7 @@ jobs:
       if: >-
         inputs.type == 'python'
         && inputs.action != 'release-no-prepare'
-      uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         input: |
           ${{ inputs.python-find-versions }}
@@ -281,7 +281,7 @@ jobs:
         inputs.type == 'python'
         && inputs.action != 'release-no-prepare'
       name: Update python release packages
-      uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         input: |
           args: >-
@@ -303,7 +303,7 @@ jobs:
       if: >-
         inputs.type == 'python'
         && inputs.action != 'release-no-prepare'
-      uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         input: |
           ${{ inputs.python-find-versions }}
@@ -349,7 +349,7 @@ jobs:
         echo "message=${COMMIT_MESSAGE}" >> "$GITHUB_OUTPUT"
         echo "changes=true" >> "$GITHUB_OUTPUT"
     - name: Create Pull Request
-      uses: envoyproxy/toolshed/actions/github/pr@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/github/pr@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       if: fromJSON(steps.commit.outputs.changes)
       with:
         base: main
diff --git a/.github/workflows/actions.yml b/.github/workflows/actions.yml
index fbbe2bee46..f62cb4690b 100644
--- a/.github/workflows/actions.yml
+++ b/.github/workflows/actions.yml
@@ -21,7 +21,7 @@ jobs:
       run: ${{ steps.filter.outputs.run }}
       tests: ${{ steps.tests.outputs.output }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/github/should-run@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: filter
       with:
         config: |
@@ -30,7 +30,7 @@ jobs:
           - 'js/**'
           - '.github/workflows/actions.yml'
     - id: tests
-      uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         input: |
           OUTPUT="$(find actions -path "*/tests/*.test.yml" -type f)"
@@ -51,9 +51,9 @@ jobs:
       matrix:
         test: ${{ fromJSON(needs.request.outputs.tests) }}
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
     - name: Run test
-      uses: envoyproxy/toolshed/actions/test-runner@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/test-runner@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       with:
         config: ${{ matrix.test }}
         name: ${{ matrix.test }}
diff --git a/.github/workflows/bazel-registry.yml b/.github/workflows/bazel-registry.yml
index 74a4cbef43..429b180151 100644
--- a/.github/workflows/bazel-registry.yml
+++ b/.github/workflows/bazel-registry.yml
@@ -21,7 +21,7 @@ jobs:
       run: ${{ steps.filter.outputs.run }}
       modules: ${{ steps.modules.outputs.output }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/github/should-run@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: filter
       with:
         config: |
@@ -31,7 +31,7 @@ jobs:
           - .github/workflows/_bazel_registry.yml
           - .github/workflows/registry_integrity.sh
     - name: Find modules
-      uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+      uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: modules
       with:
         input: |
diff --git a/.github/workflows/bazel.yml b/.github/workflows/bazel.yml
index 200807abfc..94b0d910cc 100644
--- a/.github/workflows/bazel.yml
+++ b/.github/workflows/bazel.yml
@@ -20,7 +20,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/github/should-run@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: filter
       with:
         config: |
@@ -126,7 +126,7 @@ jobs:
         - bzlmod
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
     - name: Setup Bazel
       uses: bazelbuild/setup-bazelisk@b39c379c82683a5f25d34f0d062761f62693e0b2  # v3
     - name: Bazel targets (build/${{ matrix.mode }}-macos)
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b025f995d1..43fd6dc786 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -39,18 +39,18 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@cdefb33c0f6224e58673d9004f47f7cb3e328b89  # v4.31.10
+      uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8  # v4.33.0
       with:
         languages: ${{ matrix.language }}
         config-file: ./.github/codeql/codeql-config.yml
 
     - name: Autobuild
-      uses: github/codeql-action/autobuild@cdefb33c0f6224e58673d9004f47f7cb3e328b89  # v4.31.10
+      uses: github/codeql-action/autobuild@b1bff81932f5cdfc8695c7752dcee935dcd061c8  # v4.33.0
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@cdefb33c0f6224e58673d9004f47f7cb3e328b89  # v4.31.10
+      uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8  # v4.33.0
       with:
         category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index dc49a8b8bf..a740ce36ec 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -21,7 +21,7 @@ jobs:
         sudo rm -rf /usr/local/lib/android &
         sudo rm -rf /usr/share/dotnet &
     - name: Checkout code
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
     - name: Install deps
       shell: bash
       run: |
@@ -85,7 +85,7 @@ jobs:
         bazel --version
       working-directory: bazel
 
-    - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548  # v6.1.0
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
       with:
         python-version: "3.12"
     - name: Pants
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 7fbc70807d..68c7487417 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -21,7 +21,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/github/should-run@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: filter
       with:
         config: |
@@ -43,10 +43,10 @@ jobs:
         - arm64
     name: build (${{ matrix.arch }})
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f  # v3.12.0
+      uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd  # v4.0.0
 
     - name: Get docker SHA
       id: docker-sha
@@ -72,7 +72,7 @@ jobs:
       shell: bash
 
     - name: Upload OCI artifacts
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f  # v7.0.0
       with:
         name: oci-debian-${{ matrix.arch }}
         path: docker/build/oci-output/*.tar
diff --git a/.github/workflows/jq.yml b/.github/workflows/jq.yml
index 2d6812dcb8..166f9f4c40 100644
--- a/.github/workflows/jq.yml
+++ b/.github/workflows/jq.yml
@@ -20,7 +20,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/github/should-run@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: filter
       with:
         config: |
@@ -34,7 +34,7 @@ jobs:
     if: fromJSON(needs.request.outputs.run)
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
     - name: Verify tools
       run: |
         jq --version
diff --git a/.github/workflows/js.yml b/.github/workflows/js.yml
index d507d0a656..a32413b73b 100644
--- a/.github/workflows/js.yml
+++ b/.github/workflows/js.yml
@@ -20,7 +20,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/github/should-run@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: filter
       with:
         config: |
@@ -48,9 +48,9 @@ jobs:
         - retest
         - torun
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f  # v6.1.0
+      uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f  # v6.3.0
       with:
         node-version: ${{ matrix.node-version }}
     - run: npm ci
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 8009cb4414..1391c1c1e6 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -19,8 +19,8 @@ jobs:
   lint:
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
-    - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548  # v6.1.0
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
       with:
         python-version: "3.13"
     - run: pip install --require-hashes -r ci/requirements.txt
diff --git a/.github/workflows/publishing.yml b/.github/workflows/publishing.yml
index 7924909d1c..97b9bce000 100644
--- a/.github/workflows/publishing.yml
+++ b/.github/workflows/publishing.yml
@@ -19,7 +19,7 @@ jobs:
       run: ${{ steps.filter.outputs.run }}
       sha: ${{ steps.commit.outputs.sha }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/github/should-run@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: filter
       with:
         config: |
diff --git a/.github/workflows/py.yml b/.github/workflows/py.yml
index f321cc6cb1..0ab3b1182c 100644
--- a/.github/workflows/py.yml
+++ b/.github/workflows/py.yml
@@ -22,7 +22,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/github/should-run@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: filter
       with:
         config: |
@@ -45,8 +45,8 @@ jobs:
       github.repository_owner == 'envoyproxy'
       && fromJSON(needs.request.outputs.run)
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
-    - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548  # v6.1.0
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
       with:
         python-version: "3.12"
     - name: Initialize Pants
@@ -57,7 +57,7 @@ jobs:
     - name: Run pants test
       run: "pants --colors test ::"
     - name: Archive code coverage results
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f  # v7.0.0
       with:
         name: coverage
         path: dist/coverage/python/htmlcov/
@@ -68,8 +68,8 @@ jobs:
     if: >-
       fromJSON(needs.request.outputs.run)
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
-    - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548  # v6.1.0
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
       with:
         python-version: "3.12"
     - name: Initialize Pants
@@ -86,8 +86,8 @@ jobs:
     if: >-
       fromJSON(needs.request.outputs.run)
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
-    - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548  # v6.1.0
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
       with:
         python-version: "3.12"
     - name: Initialize Pants
@@ -102,8 +102,8 @@ jobs:
     # TODO: reenable once plugin is fixed
     if: false
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
-    - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548  # v6.1.0
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
       with:
         python-version: "3.12"
     - name: Initialize Pants
@@ -125,8 +125,8 @@ jobs:
     if: >-
       fromJSON(needs.request.outputs.run)
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
-    - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548  # v6.1.0
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
       with:
         python-version: "3.12"
     - name: Initialize Pants
@@ -137,7 +137,7 @@ jobs:
     - name: Run pants package
       run: "pants --colors package ::"
     - name: Archive created packages
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f  # v7.0.0
       with:
         name: python-artifacts
         path: dist/*whl
diff --git a/.github/workflows/releasing.yml b/.github/workflows/releasing.yml
index 7d12eb6470..4edfe9adb3 100644
--- a/.github/workflows/releasing.yml
+++ b/.github/workflows/releasing.yml
@@ -19,7 +19,7 @@ jobs:
       run: ${{ steps.filter.outputs.run }}
       sha: ${{ steps.commit.outputs.sha }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/github/should-run@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: filter
       with:
         config: |
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 43932d4359..7361042bb2 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -21,7 +21,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/github/should-run@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: filter
       with:
         config: |
@@ -47,8 +47,8 @@ jobs:
         - integration
     name: test (${{ matrix.toolchain }}, ${{ matrix.test-type }})
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
-    - uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c  # v1
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+    - uses: actions-rust-lang/setup-rust-toolchain@150fca883cd4034361b621bd4e6a9d34e5143606  # v1
       with:
         toolchain: ${{ matrix.toolchain }}
     - name: Install cargo-tarpaulin
@@ -81,10 +81,10 @@ jobs:
           runs-on: ubuntu-24.04-arm
           rust-target: aarch64-unknown-linux-gnu
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
     - name: Install Rust toolchain
-      uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c  # v1
+      uses: actions-rust-lang/setup-rust-toolchain@150fca883cd4034361b621bd4e6a9d34e5143606  # v1
       with:
         toolchain: stable
 
@@ -107,7 +107,7 @@ jobs:
         cp rust/target/release/glint glint-${{ steps.version.outputs.version }}-${{ matrix.arch }}
 
     - name: Upload glint binary
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f  # v7.0.0
       with:
         name: rust-artifacts-glint-${{ steps.version.outputs.version }}-${{ matrix.arch }}
         path: glint-${{ steps.version.outputs.version }}-${{ matrix.arch }}
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index e7edb5e690..f03e76338c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -25,7 +25,7 @@ jobs:
 
     steps:
     - name: "Checkout code"
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
       with:
         persist-credentials: false
 
@@ -37,13 +37,13 @@ jobs:
         publish_results: true
 
     - name: "Upload artifact"
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f  # v7.0.0
       with:
         name: SARIF file
         path: results.sarif
         retention-days: 5
 
     - name: "Upload to code-scanning"
-      uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89  # v4.31.10
+      uses: github/codeql-action/upload-sarif@b1bff81932f5cdfc8695c7752dcee935dcd061c8  # v4.33.0
       with:
         sarif_file: results.sarif
diff --git a/.github/workflows/sh.yml b/.github/workflows/sh.yml
index 951065b53a..c9cebcae94 100644
--- a/.github/workflows/sh.yml
+++ b/.github/workflows/sh.yml
@@ -20,7 +20,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@d10938876b114aa2a001b43b43158f1bf7008f1a
+    - uses: envoyproxy/toolshed/actions/github/should-run@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
       id: filter
       with:
         config: |
@@ -44,7 +44,7 @@ jobs:
 
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
     - run: |
         sudo apt-get update
         sudo apt-get  -qq install -y inotify-tools
diff --git a/.github/workflows/update-versions.yml b/.github/workflows/update-versions.yml
index 10297b1056..44975c9e89 100644
--- a/.github/workflows/update-versions.yml
+++ b/.github/workflows/update-versions.yml
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
     - name: Determine release tag
       id: release
       env:
@@ -212,7 +212,7 @@ jobs:
         fi
     - name: Create Pull Request
       if: github.event_name == 'workflow_dispatch' && steps.changes.outputs.changed == 'true' && steps.release.outputs.skip != 'true'
-      uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8
+      uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8
       env:
         MSAN_SHA: >-
           ${{ steps.hashes.outputs.msan_libs_sha256
diff --git a/actions/azp/agent-cleanup/action.yml b/actions/azp/agent-cleanup/action.yml
index 60d230eabb..26022876d1 100644
--- a/actions/azp/agent-cleanup/action.yml
+++ b/actions/azp/agent-cleanup/action.yml
@@ -17,17 +17,17 @@ runs:
   using: "composite"
   steps:
   - name: Checkout repository
-    uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+    uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
   - id: fetch
     name: Fetch AZP agents list
-    uses: envoyproxy/toolshed/actions/fetch@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/fetch@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       url: https://dev.azure.com/${{ inputs.azp-org }}/_apis/distributedtask/pools/${{ inputs.pool-id }}/agents?api-version=7.1-preview.1
       args: -u ":${{ inputs.azp-token }}"
 
   - name: Get dead AZP agent ids
-    uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input-format: json-path
       input: ${{ steps.fetch.outputs.path }}
diff --git a/actions/bind-mounts/action.yml b/actions/bind-mounts/action.yml
index 427c9112bb..cccaa1eb31 100644
--- a/actions/bind-mounts/action.yml
+++ b/actions/bind-mounts/action.yml
@@ -23,7 +23,7 @@ runs:
   using: composite
   steps:
   - name: Bind mount directories
-    uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: mount
     with:
       input: ${{ inputs.mounts }}
diff --git a/actions/bson/action.yml b/actions/bson/action.yml
index f3859bae43..16642e353d 100644
--- a/actions/bson/action.yml
+++ b/actions/bson/action.yml
@@ -48,7 +48,7 @@ runs:
       chmod +x $TMPFILE
       echo "path=$TMPFILE" >> $GITHUB_OUTPUT
     shell: bash
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: command
     with:
       input: ${{ inputs.input }}
@@ -76,7 +76,7 @@ runs:
       TMPFILE: ${{ steps.script.outputs.path }}
     shell: bash
   - id: output
-    uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: ${{ inputs.result-filter }}
     with:
       input: ${{ steps.run.outputs.output }}
diff --git a/actions/buildah/action.yml b/actions/buildah/action.yml
index 12b09da1e1..cc660f464e 100644
--- a/actions/buildah/action.yml
+++ b/actions/buildah/action.yml
@@ -65,7 +65,7 @@ runs:
       echo '${{ inputs.gcr-key }}' | base64 -d | buildah login --username _json_key --password-stdin gcr.io
       echo "::endgroup::"
   - name: Execute buildah operations
-    uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: execute
     with:
       title: Execute buildah operations
diff --git a/actions/cache/prime/action.yml b/actions/cache/prime/action.yml
index 46cfb3b412..08090f6140 100644
--- a/actions/cache/prime/action.yml
+++ b/actions/cache/prime/action.yml
@@ -70,7 +70,7 @@ runs:
     id: gcs-object
     if: >-
       inputs.cache-type == 'gcs'
-    uses: envoyproxy/toolshed/actions/gcs/cache/exists@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/gcs/cache/exists@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       bucket: ${{ inputs.gcs-bucket }}
       key: ${{ inputs.key }}
@@ -78,7 +78,7 @@ runs:
     id: artifact-object
     if: >-
       inputs.cache-type == 'artifact'
-    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       name: ${{ inputs.key }}
       wf-path: ${{ inputs.artifact-wf-path }}
@@ -87,14 +87,14 @@ runs:
     id: cache-restore-initial
     if: >-
       inputs.cache-type == 'github'
-    uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb  # v5.0.1
+    uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7  # v5.0.4
     with:
       lookup-only: true
       path: ${{ inputs.path || inputs.path-tmp }}
       key: ${{ inputs.key }}
 
   # Mutex
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: >-
       ! inputs.lock-id
       && steps.cache-restore-initial.outputs.cache-hit != 'true'
@@ -106,7 +106,7 @@ runs:
       options: -Rr
       filter: |
         @base64
-  - uses: envoyproxy/toolshed/actions/github/mutex@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/github/mutex@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: >-
       inputs.lock-token
       && steps.cache-restore-initial.outputs.cache-hit != 'true'
@@ -124,7 +124,7 @@ runs:
       inputs.lock-token
       && steps.cache-restore-initial.outputs.cache-hit != 'true'
       && inputs.cache-type == 'github'
-    uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb  # v5.0.1
+    uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7  # v5.0.4
     with:
       lookup-only: true
       path: ${{ inputs.path || inputs.path-tmp }}
@@ -134,7 +134,7 @@ runs:
     if: >-
       inputs.cache-type == 'artifact'
       && steps.artifact-object.outputs.exists == ''
-    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       name: ${{ inputs.key }}
       wf-path: ${{ inputs.artifact-wf-path }}
@@ -143,7 +143,7 @@ runs:
     if: >-
       inputs.cache-type == 'gcs'
       && steps.gcs-object.outputs.exists != 'true'
-    uses: envoyproxy/toolshed/actions/gcs/cache/exists@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/gcs/cache/exists@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       bucket: ${{ inputs.gcs-bucket }}
       key: ${{ inputs.key }}
@@ -202,7 +202,7 @@ runs:
       steps.restore.outputs.save == 'true'
       && inputs.cache-type == 'github'
     name: Save cache
-    uses: actions/cache/save@9255dc7a253b0ccc959486e2bca901246202afeb  # v5.0.1
+    uses: actions/cache/save@668228422ae6a00e4ad889ee87cd7109ec5666a7  # v5.0.4
     with:
       path: ${{ inputs.path || inputs.path-tmp }}
       key: ${{ inputs.key }}
@@ -210,7 +210,7 @@ runs:
   - if: >-
       steps.restore.outputs.save == 'true'
       && inputs.gcs-bucket
-    uses: envoyproxy/toolshed/actions/gcs/cache/save@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/gcs/cache/save@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       bucket: ${{ inputs.gcs-bucket }}
       key: ${{ inputs.key }}
@@ -220,7 +220,7 @@ runs:
     if: >-
       steps.restore.outputs.save == 'true'
       && inputs.cache-type == 'artifact'
-    uses: envoyproxy/toolshed/actions/github/artifact/cache/save@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/github/artifact/cache/save@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       name: ${{ inputs.artifact-name }}
       path: ${{ inputs.path || inputs.path-tmp }}
diff --git a/actions/cache/restore/action.yml b/actions/cache/restore/action.yml
index 5a285c3924..5abf7b69c6 100644
--- a/actions/cache/restore/action.yml
+++ b/actions/cache/restore/action.yml
@@ -64,7 +64,7 @@ runs:
     if: >-
       inputs.cache-type == 'github'
     id: cache-restore
-    uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb  # v5.0.1
+    uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7  # v5.0.4
     with:
       path: ${{ inputs.path || inputs.path-tmp }}
       key: ${{ inputs.key }}
@@ -72,7 +72,7 @@ runs:
     if: >-
       inputs.cache-type == 'gcs'
     id: cache-restore-gcs
-    uses: envoyproxy/toolshed/actions/gcs/cache/restore@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/gcs/cache/restore@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       bucket: ${{ inputs.gcs-bucket }}
       path: ${{ inputs.path || inputs.path-tmp }}
@@ -81,7 +81,7 @@ runs:
     if: >-
       inputs.cache-type == 'artifact'
     id: cache-restore-artifact
-    uses: envoyproxy/toolshed/actions/github/artifact/cache/restore@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/github/artifact/cache/restore@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       id: ${{ inputs.artifact-id }}
       name: ${{ inputs.artifact-name }}
diff --git a/actions/docker/cache/prime/action.yml b/actions/docker/cache/prime/action.yml
index 95d165b844..0fae48d8c4 100644
--- a/actions/docker/cache/prime/action.yml
+++ b/actions/docker/cache/prime/action.yml
@@ -21,7 +21,7 @@ outputs:
 runs:
   using: "composite"
   steps:
-  - uses: envoyproxy/toolshed/actions/cache/prime@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/cache/prime@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: prime
     with:
       key: ${{ inputs.image-tag }}${{ inputs.key-suffix }}
diff --git a/actions/docker/cache/restore/action.yml b/actions/docker/cache/restore/action.yml
index 5faf3358cc..d5bf7de017 100644
--- a/actions/docker/cache/restore/action.yml
+++ b/actions/docker/cache/restore/action.yml
@@ -18,7 +18,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-  - uses: envoyproxy/toolshed/actions/cache/restore@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/cache/restore@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       key: ${{ inputs.image-tag }}${{ inputs.key-suffix }}
       command: |
diff --git a/actions/docker/fetch/action.yml b/actions/docker/fetch/action.yml
index edfdcf8e49..417d296066 100644
--- a/actions/docker/fetch/action.yml
+++ b/actions/docker/fetch/action.yml
@@ -13,7 +13,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-  - uses: envoyproxy/toolshed/actions/fetch@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/fetch@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: fetch
     with:
       url: ${{ inputs.url }}
diff --git a/actions/docker/shas/action.yml b/actions/docker/shas/action.yml
index 608d6fbd45..adc4072929 100644
--- a/actions/docker/shas/action.yml
+++ b/actions/docker/shas/action.yml
@@ -14,12 +14,12 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: yaml
     with:
       input: ${{ inputs.images }}
       input-format: yaml
-  - uses: envoyproxy/toolshed/actions/foreach@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/foreach@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: json_actions
     with:
       items: ${{ steps.yaml.outputs.value }}
@@ -31,7 +31,7 @@ runs:
               %{{ fromJSON(inputs.context).items['$KEY'] }}
             env_var: ${{ inputs.env_prefix }}_$KEY
 
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: images
     with:
       input: ${{ steps.json_actions.outputs.out }}
diff --git a/actions/envoy/android/pre/action.yml b/actions/envoy/android/pre/action.yml
index 5440a66801..a7c0df4a43 100644
--- a/actions/envoy/android/pre/action.yml
+++ b/actions/envoy/android/pre/action.yml
@@ -1,7 +1,7 @@
 runs:
   using: composite
   steps:
-  - uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e
+  - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
     with:
       java-version: '11'
       java-package: jdk
diff --git a/actions/envoy/ci/env/action.yml b/actions/envoy/ci/env/action.yml
index 1b486f854a..72f1e55bcf 100644
--- a/actions/envoy/ci/env/action.yml
+++ b/actions/envoy/ci/env/action.yml
@@ -52,7 +52,7 @@ runs:
   steps:
 
   # Check current/requested config (currently only build-images can be overridden)
-  - uses: envoyproxy/toolshed/gh-actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/gh-actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: config
     with:
       title: fetch ${{ inputs.branch-name }}:${{ inputs.config-file }}
@@ -70,7 +70,7 @@ runs:
       result-filter: .
 
   - id: build-images
-    uses: envoyproxy/toolshed/gh-actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/gh-actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input-format: yaml-path
       input: ${{ inputs.config-file }}
@@ -86,7 +86,7 @@ runs:
         | {$requested}
 
   # Check request version
-  - uses: envoyproxy/toolshed/gh-actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/gh-actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Validate given version string
     id: version
     with:
@@ -105,7 +105,7 @@ runs:
         | {requested: .}
 
   - id: request
-    uses: envoyproxy/toolshed/gh-actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/gh-actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input: |
         actor: ${{ toJSON(github.actor) }}
@@ -138,12 +138,12 @@ runs:
 
   - name: Run config
     id: run-config
-    uses: envoyproxy/toolshed/gh-actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/gh-actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input-format: yaml
       input: ${{ toJSON(fromJSON(steps.config.outputs.output).run) }}
 
-  - uses: envoyproxy/toolshed/gh-actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/gh-actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Create data
     id: data
     with:
diff --git a/actions/envoy/ci/request/action.yml b/actions/envoy/ci/request/action.yml
index a3385de24b..33cd08d3f4 100644
--- a/actions/envoy/ci/request/action.yml
+++ b/actions/envoy/ci/request/action.yml
@@ -69,7 +69,7 @@ runs:
   #
   # Only specified bots are trusted.
   - id: trusted
-    uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input: |
         trusted_bots: |
@@ -87,7 +87,7 @@ runs:
         | (. and ($input.event_name | startswith("pull_request") | not))
 
   # Check requested changes
-  - uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: changed
     with:
       title: git diff changes from ${{ inputs.merge-commit || 'HEAD^1' }}
@@ -108,7 +108,7 @@ runs:
         | split("\n")
 
   # Check current/requested config (currently only build-images can be overridden)
-  - uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: config
     with:
       title: fetch ${{ inputs.branch-name }}:${{ inputs.config-file }}
@@ -128,7 +128,7 @@ runs:
       result-filter: .
 
   - id: build-images
-    uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input-format: yaml-path
       input: ${{ inputs.working-directory }}/${{ inputs.config-file }}
@@ -151,7 +151,7 @@ runs:
         | {$requested, current: .}
 
   # Check current/request versions
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Validate given version string
     id: version-string
     with:
@@ -160,7 +160,7 @@ runs:
       input: ${{ inputs.working-directory }}/VERSION.txt
       filter: |
         validate::version
-  - uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: version
     with:
       title: fetch ${{ inputs.branch-name }}:${{ inputs.version-file }}
@@ -192,7 +192,7 @@ runs:
         | {requested: ., current: $current}
 
   - id: request
-    uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input: |
         actor: ${{ toJSON(github.actor) }}
@@ -240,18 +240,18 @@ runs:
 
   - name: Run config
     id: run-config
-    uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input-format: yaml
       input: ${{ toJSON(fromJSON(steps.config.outputs.output).run) }}
-  - uses: envoyproxy/toolshed/actions/torun@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/torun@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: torun
     with:
       event: ${{ github.event_name }}
       config: ${{ steps.run-config.outputs.value }}
       paths: ${{ steps.changed.outputs.output || '[]' }}
 
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Create data
     id: data
     with:
diff --git a/actions/envoy/run/summary/action.yml b/actions/envoy/run/summary/action.yml
index a5b2ab1725..78f9681a9d 100644
--- a/actions/envoy/run/summary/action.yml
+++ b/actions/envoy/run/summary/action.yml
@@ -113,12 +113,12 @@ inputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: ${{ fromJSON(env.CI_DEBUG || 'false') && true || false }}
     with:
       input: ${{ inputs.context }}
       print-result: true
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Runtime information
     id: run-info
     with:
@@ -135,13 +135,13 @@ runs:
          completed: .run.completed,
          "run-time": "\(.run.completed - .run.started | . * 100 | round / 100)s",
          "job-time": "\(.run.completed - .context["job-started"] | . * 100 | round / 100)s"}
-  - uses: envoyproxy/toolshed/actions/json/table@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/json/table@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Run information summary
     id: run-summary
     with:
       json: ${{ steps.run-info.outputs.value }}
       title: Runtime information
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input: ${{ inputs.context }}
       options: -r
diff --git a/actions/foreach/action.yml b/actions/foreach/action.yml
index 10e94071c6..cf2e3d8144 100644
--- a/actions/foreach/action.yml
+++ b/actions/foreach/action.yml
@@ -25,7 +25,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Context
     id: context
     with:
@@ -33,13 +33,13 @@ runs:
       filter: |
         ${{ inputs.context-filter }}
         | . * {"items": ${{ inputs.items }}}
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Steps (JSON)
     id: steps-json
     with:
       input: ${{ inputs.steps }}
       input-format: yaml
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Steps
     id: steps-subs
     with:
@@ -55,7 +55,7 @@ runs:
         | map(.key as $k | $out | . + [($steps | walk(if type == "string" then sub("\\$KEY"; "\($k)") else . end))])
         | flatten
 
-  - uses: envoyproxy/toolshed/actions/using/steps@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/using/steps@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: steps
     with:
       name: ${{ inputs.name }}
diff --git a/actions/gcp/setup/action.yml b/actions/gcp/setup/action.yml
index cf0c64b615..c7aa6e3e77 100644
--- a/actions/gcp/setup/action.yml
+++ b/actions/gcp/setup/action.yml
@@ -49,7 +49,7 @@ runs:
     id: gsutil
     if: ${{ inputs.key && ! fromJSON(inputs.force-install) }}
     shell: bash
-  - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548  # v6.1.0
+  - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
     if: ${{ inputs.key && steps.gsutil.outputs.installed != 'true' }}
     with:
       python-version: ${{ inputs.python-version }}
@@ -64,7 +64,7 @@ runs:
     if: ${{ inputs.key }}
     shell: bash
 
-  - uses: envoyproxy/toolshed/actions/github/script/run@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/github/script/run@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: key
     if: ${{ inputs.key }}
     with:
diff --git a/actions/gcs/fuse/action.yml b/actions/gcs/fuse/action.yml
index 339a2ca74c..3a68408af7 100644
--- a/actions/gcs/fuse/action.yml
+++ b/actions/gcs/fuse/action.yml
@@ -131,7 +131,7 @@ runs:
           ARCH="arm64"
       fi
       echo "address=${GCSFUSE_DOWNLOAD_ROOT}/${GCSFUSE_VERSION}/gcsfuse_${GCSFUSE_VERSION#v}_${ARCH}.deb" >> $GITHUB_OUTPUT
-  - uses: envoyproxy/toolshed/actions/fetch@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/fetch@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Fetch gcsfuse
     if: ${{ steps.status.outputs.installed != 'true' }}
     with:
@@ -171,7 +171,7 @@ runs:
       echo "key-path=${KEY_PATH}" >> $GITHUB_OUTPUT
       echo "GOOGLE_APPLICATION_CREDENTIALS=${KEY_PATH}" >> $GITHUB_ENV
     shell: bash
-  - uses: envoyproxy/toolshed/actions/github/script/run@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/github/script/run@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Mount GCS bucket
     id: mount
     env:
@@ -232,7 +232,7 @@ runs:
       post: |
         rm -rf ${{ steps.sa.outputs.key-path }}
         ${AS_ROOT} fusermount -u "${{ inputs.mount-point }}" || true
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Parse mount
     with:
       input: ${{ steps.mount.outputs.output-path }}
diff --git a/actions/github/afterall/action.yml b/actions/github/afterall/action.yml
index a8b0d8661d..aed5ae7255 100644
--- a/actions/github/afterall/action.yml
+++ b/actions/github/afterall/action.yml
@@ -56,7 +56,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: workflows
     with:
       options: -sRc
@@ -65,7 +65,7 @@ runs:
         .
         | split("\n")
         | map(select(length > 0))
-  - uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: check-workflows
     env:
       GH_TOKEN: ${{ inputs.token }}
diff --git a/actions/github/artifact/cache/restore/action.yml b/actions/github/artifact/cache/restore/action.yml
index ae6bdebcb6..469ecff0fe 100644
--- a/actions/github/artifact/cache/restore/action.yml
+++ b/actions/github/artifact/cache/restore/action.yml
@@ -29,7 +29,7 @@ runs:
     if: >-
       ! inputs.id
     id: cache-id
-    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       name: ${{ inputs.name }}
       token: ${{ inputs.token }}
diff --git a/actions/github/checkout/action.yml b/actions/github/checkout/action.yml
index f6a82478c6..15f1e2b3ce 100644
--- a/actions/github/checkout/action.yml
+++ b/actions/github/checkout/action.yml
@@ -79,7 +79,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/github/merge-commit@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/github/merge-commit@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: merge-commit
     name: Fetch merge commit hash
     if: ${{ inputs.pr != '' && fromJSON(inputs.fetch-merge-commit) }}
@@ -91,7 +91,7 @@ runs:
   # otherwise the config value is respected.
   - name: Parse YAML config
     id: parsed-config
-    uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input: ${{ inputs.config || '{}' }}
       input-format: yaml
@@ -138,7 +138,7 @@ runs:
   - name: Config
     id: config-token
     if: ${{ inputs.ssh-key == '' }}
-    uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input: ${{ inputs.token || github.token }}
       options: -R
@@ -151,7 +151,7 @@ runs:
         | del(.branch, .["requested-ref"])
   - name: Config
     id: config-ssh
-    uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: ${{ inputs.ssh-key != '' }}
     with:
       input: ${{ inputs.ssh-key }}
@@ -163,7 +163,7 @@ runs:
         | $config
         | .["ssh-key"] = $sshKey
         | del(.branch, .["requested-ref"])
-  - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+  - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
     name: Checkout repository
     with: ${{ fromJSON(steps.config-ssh.outputs.value || steps.config-token.outputs.value || '{}') }}
   - if: >-
@@ -190,7 +190,7 @@ runs:
       COMMITTER_EMAIL: ${{ inputs.committer-email }}
     shell: bash
   - id: branch
-    uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input: ${{ fromJSON(steps.parsed-config.outputs.value).branch }}
       input-format: text
diff --git a/actions/github/command/action.yml b/actions/github/command/action.yml
index 1ee869a6b3..03851fd25c 100644
--- a/actions/github/command/action.yml
+++ b/actions/github/command/action.yml
@@ -17,7 +17,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Parse command from text
     id: command
     with:
diff --git a/actions/github/env/load/action.yml b/actions/github/env/load/action.yml
index a044c1b7fb..f262a18365 100644
--- a/actions/github/env/load/action.yml
+++ b/actions/github/env/load/action.yml
@@ -36,7 +36,7 @@ runs:
   using: composite
   steps:
   # For dispatch events we have to find the request via the Request workflow
-  - uses: envoyproxy/toolshed/gh-actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/gh-actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Find request
     id: find-request
     if: ${{ inputs.head-sha }}
@@ -47,7 +47,7 @@ runs:
         | ("${{ inputs.template-script-current }}" | bash::output)
   - name: Download environment data
     id: download
-    uses: envoyproxy/toolshed/gh-actions/github/artifact/download@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/gh-actions/github/artifact/download@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       name: ${{ inputs.name }}
       path: ${{ runner.temp }}
@@ -55,7 +55,7 @@ runs:
 
   - name: Validate environment source
     if: ${{ github.event_name == 'workflow_run' }}
-    uses: envoyproxy/toolshed/gh-actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/gh-actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input: |
         workflow_event: ${{ toJSON(github.event.workflow_run.event) }}
@@ -79,7 +79,7 @@ runs:
           else
             "✓ Environment source validation passed"
           end
-  - uses: envoyproxy/toolshed/gh-actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/gh-actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Load env data
     id: data
     with:
diff --git a/actions/github/env/save/action.yml b/actions/github/env/save/action.yml
index eeacb4e81c..b84c52d92d 100644
--- a/actions/github/env/save/action.yml
+++ b/actions/github/env/save/action.yml
@@ -20,7 +20,7 @@ runs:
       # Create temporary directory
       OUTPUT_DIR=$(mktemp -d)
       echo "directory=${OUTPUT_DIR}" >> $GITHUB_OUTPUT
-  - uses: envoyproxy/toolshed/gh-actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/gh-actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Check proxy data
     id: env
     with:
@@ -32,7 +32,7 @@ runs:
       output-path: ${{ steps.path.outputs.directory }}/${{ inputs.name }}.json
 
   - name: Upload environment data
-    uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
+    uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f  # v7.0.0
     with:
       name: ${{ inputs.name }}
       path: ${{ steps.path.outputs.directory }}
diff --git a/actions/github/env/summary/action.yml b/actions/github/env/summary/action.yml
index c64b05b5a2..367576594c 100644
--- a/actions/github/env/summary/action.yml
+++ b/actions/github/env/summary/action.yml
@@ -61,7 +61,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/gh-actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/gh-actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: linked-title
     with:
       input: |
@@ -76,7 +76,7 @@ runs:
       options: -r
       filter: gfm::event_title
 
-  - uses: envoyproxy/toolshed/gh-actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/gh-actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: title
     with:
       input: |
@@ -92,7 +92,7 @@ runs:
       filter: gfm::event_title
 
   # This generates a filter from configuration
-  - uses: envoyproxy/toolshed/gh-actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/gh-actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Table filter
     id: table-filter
     with:
@@ -103,7 +103,7 @@ runs:
       filter: |
         with_entries({key: .key, value: .value.filter})
         | utils::filters
-  - uses: envoyproxy/toolshed/gh-actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/gh-actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Tables
     id: tables
     with:
@@ -121,7 +121,7 @@ runs:
               | select(.value.data | type != "null"))
         | gfm::tables
 
-  - uses: envoyproxy/toolshed/gh-actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/gh-actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: output
     with:
       input: ${{ toJSON(inputs) }}
@@ -160,7 +160,7 @@ runs:
         "
         | str::indent($inputs.indent // "0" | fromjson)
 
-  - uses: envoyproxy/toolshed/gh-actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/gh-actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: ${{ inputs.output-path }}
     with:
       input: ${{ steps.output.outputs.value }}
diff --git a/actions/github/issue/get/action.yml b/actions/github/issue/get/action.yml
index 7241dbe023..b31f8bac17 100644
--- a/actions/github/issue/get/action.yml
+++ b/actions/github/issue/get/action.yml
@@ -60,7 +60,7 @@ runs:
     shell: bash
     env:
       GH_TOKEN: "${{ inputs.GITHUB_TOKEN }}"
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: issue-id
     with:
       input: ${{ steps.issue-query.outputs.result }}
diff --git a/actions/github/merge-commit/action.yml b/actions/github/merge-commit/action.yml
index a41f43bf11..3d83cafcce 100644
--- a/actions/github/merge-commit/action.yml
+++ b/actions/github/merge-commit/action.yml
@@ -32,14 +32,14 @@ runs:
     shell: bash
     env:
       URL: https://api.github.com/repos/${{ inputs.repository }}/pulls/${{ inputs.pr }}
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: jq
     with:
       input: ${{ steps.fetch.outputs.response }}
       options: -r
       filter: |
         .merge_commit_sha // ""
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: ${{ ! steps.jq.outputs.value }}
     with:
       input: ${{ steps.fetch.outputs.response }}
diff --git a/actions/github/pr/action.yml b/actions/github/pr/action.yml
index a155bc431b..472178f469 100644
--- a/actions/github/pr/action.yml
+++ b/actions/github/pr/action.yml
@@ -59,7 +59,7 @@ runs:
   using: composite
   steps:
   - name: Checkout branch (${{ inputs.branch }})
-    uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     env:
       GH_TOKEN: ${{ inputs.GITHUB_TOKEN }}
       CI_DEBUG: true
@@ -91,7 +91,7 @@ runs:
         | "${{ inputs.template-create-pr }}"
 
   - name: Upload diff
-    uses: envoyproxy/toolshed/actions/upload/diff@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/upload/diff@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: ${{ inputs.diff-upload }}
     with:
       diff: HEAD^1
diff --git a/actions/github/release/action.yml b/actions/github/release/action.yml
index 5d155ca9ef..b6ffddd664 100644
--- a/actions/github/release/action.yml
+++ b/actions/github/release/action.yml
@@ -71,7 +71,7 @@ runs:
   steps:
   - name: Check release status
     id: status
-    uses: envoyproxy/toolshed/actions/github/release/status@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/github/release/status@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       name: ${{ inputs.name }}
       repository: ${{ inputs.repository }}
@@ -87,7 +87,7 @@ runs:
       && fromJSON(inputs.artifacts)
       && ! fromJSON(steps.status.outputs.version).is_dev
     name: Download artifacts from workflow runs
-    uses: envoyproxy/toolshed/actions/github/release/artifacts@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/github/release/artifacts@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       filter-artifacts: ${{ inputs.filter-artifacts }}
       gpg-fingerprint: ${{ inputs.gpg-fingerprint }}
@@ -100,7 +100,7 @@ runs:
     if: >-
       fromJSON(steps.status.outputs.continue)
       && ! fromJSON(steps.status.outputs.version).is_dev
-    uses: envoyproxy/toolshed/actions/github/release/publish@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/github/release/publish@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       assets: ${{ fromJSON(inputs.artifacts) && format('{0}/*', inputs.publish-directory) || '' }}
       dry-run: ${{ inputs.dry-run }}
diff --git a/actions/github/release/artifacts/action.yml b/actions/github/release/artifacts/action.yml
index a2d7da73bc..c41647ab35 100644
--- a/actions/github/release/artifacts/action.yml
+++ b/actions/github/release/artifacts/action.yml
@@ -45,7 +45,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Generate download config
     id: download-config
     with:
@@ -64,7 +64,7 @@ runs:
                  name: $name,
                  run_id: $run_ids[.]}})
         | from_entries
-  - uses: envoyproxy/toolshed/actions/foreach@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/foreach@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: steps.download-config.outputs.value
     with:
       items: ${{ steps.download-config.outputs.value }}
@@ -84,7 +84,7 @@ runs:
   - name: List downloaded artifacts
     id: artifacts
     if: steps.download-config.outputs.value
-    uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       catch-errors: true
       input: |
@@ -112,7 +112,7 @@ runs:
     if: >-
       steps.artifacts.outputs.output != ''
       && steps.artifacts.outputs.output != '{}'
-    uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input: |
         artifacts: ${{ steps.artifacts.outputs.output }}
@@ -129,14 +129,14 @@ runs:
     if: >-
       steps.artifacts.outputs.output != ''
       && steps.artifacts.outputs.output != '{}'
-    uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input: ${{ steps.artifacts.outputs.output }}
   - name: Generate workflow artifacts table
     if: >-
       steps.artifacts.outputs.output != ''
       && steps.artifacts.outputs.output != '{}'
-    uses: envoyproxy/toolshed/actions/json/table@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/json/table@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       title: Artifacts to publish
       append: true
@@ -168,7 +168,7 @@ runs:
       steps.artifacts.outputs.output != '{}'
       && steps.artifacts.outputs.output != ''
       && inputs.gpg-fingerprint != ''
-    uses: envoyproxy/toolshed/actions/gpg/sign@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/gpg/sign@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       debug: ${{ inputs.debug }}
       fingerprint: ${{ inputs.gpg-fingerprint }}
diff --git a/actions/github/release/latest/action.yml b/actions/github/release/latest/action.yml
index c18500fc81..30c4114f1f 100644
--- a/actions/github/release/latest/action.yml
+++ b/actions/github/release/latest/action.yml
@@ -36,7 +36,7 @@ runs:
   using: composite
   steps:
   - id: latest
-    uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input: |
         repo: ${{ inputs.repository }}
diff --git a/actions/github/release/publish/action.yml b/actions/github/release/publish/action.yml
index c961362526..e89bac804a 100644
--- a/actions/github/release/publish/action.yml
+++ b/actions/github/release/publish/action.yml
@@ -67,7 +67,7 @@ inputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: >-
       inputs.assets
     id: assets
@@ -79,7 +79,7 @@ runs:
         .
         | split("\n")
         | join(" ")
-  - uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: release
     env:
       GH_TOKEN: ${{ inputs.token }}
@@ -118,7 +118,7 @@ runs:
           && '(dry-run)'
           || ''  }}
     if: fromJSON(inputs.summary)
-    uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input: |
         result: ${{ steps.release.outputs.output || '[]' }}
diff --git a/actions/github/release/shas/action.yml b/actions/github/release/shas/action.yml
index df50fdfe7c..07d2df52b5 100644
--- a/actions/github/release/shas/action.yml
+++ b/actions/github/release/shas/action.yml
@@ -24,7 +24,7 @@ runs:
   using: composite
   steps:
   - id: filtered-assets
-    uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input: |
         tag: ${{ inputs.tag }}
diff --git a/actions/github/release/status/action.yml b/actions/github/release/status/action.yml
index cc8070cc14..020f4b24c2 100644
--- a/actions/github/release/status/action.yml
+++ b/actions/github/release/status/action.yml
@@ -42,20 +42,20 @@ runs:
   steps:
   - name: Check all workflows ran
     id: afterall
-    uses: envoyproxy/toolshed/actions/github/afterall@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/github/afterall@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       sha: ${{ inputs.sha }}
       workflows: ${{ inputs.workflows }}
       repo: ${{ inputs.repository }}
   - name: Version info
     id: version
-    uses: envoyproxy/toolshed/actions/version@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/version@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       version: ${{ inputs.version }}
       version-file: ${{ inputs.version-file }}
   - name: Status summary title
     id: status-summary-title
-    uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       input: |
         name: ${{ inputs.name }}
@@ -72,7 +72,7 @@ runs:
            end) as $release_info
         | "${{ inputs.template-status }}"
   - name: Versions info
-    uses: envoyproxy/toolshed/actions/json/table@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/json/table@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       append: true
       output-path: GITHUB_STEP_SUMMARY
@@ -97,7 +97,7 @@ runs:
             "continue": .continue,
           }
   - name: Generate workflow status table
-    uses: envoyproxy/toolshed/actions/json/table@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/json/table@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       title: Required Workflows Status
       append: true
diff --git a/actions/github/run/action.yml b/actions/github/run/action.yml
index 572623f2e6..fc8bab72e5 100644
--- a/actions/github/run/action.yml
+++ b/actions/github/run/action.yml
@@ -112,10 +112,10 @@ runs:
   steps:
   - if: ${{ fromJSON(inputs.diskspace-hack) }}
     name: Free diskspace
-    uses: envoyproxy/toolshed/actions/diskspace@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/diskspace@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       to_remove: ${{ inputs.diskspace-hack-paths }}
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Generate download config
     if: ${{ inputs.downloads }}
     id: download-config
@@ -132,7 +132,7 @@ runs:
              else
                "${{ runner.temp }}/\(.)"
              end)
-  - uses: envoyproxy/toolshed/actions/foreach@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/foreach@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: ${{ steps.download-config.outputs.value }}
     with:
       items: ${{ steps.download-config.outputs.value }}
@@ -175,7 +175,7 @@ runs:
       OUTPUT_DATA: ${{ inputs.output-path }}
     shell: bash
 
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: entrypoint
     with:
       input: |
@@ -185,7 +185,7 @@ runs:
       output-path: ${{ steps.paths.outputs.entrypoint }}
       print-output: ${{ fromJSON(env.CI_DEBUG || 'false') && true || false }}
 
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: source
     with:
       input: |
@@ -194,27 +194,27 @@ runs:
       options: -Rsr
       output-path: ${{ steps.paths.outputs.source }}
       print-output: ${{ fromJSON(env.CI_DEBUG || 'false') && true || false }}
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Generate run context (steps-pre)
     id: context-steps-pre
     with:
       input: ${{ inputs.steps-pre || '""' }}
       options: -Rs
       input-format: string
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Generate run context (steps-post)
     id: context-steps-post
     with:
       input: ${{ inputs.steps-post || '""' }}
       options: -Rs
       input-format: string
-  - uses: envoyproxy/toolshed/actions/using/steps@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/using/steps@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Pre report
     if: ${{ inputs.report-pre }}
     with:
       steps: ${{ inputs.report-pre }}
       context: ${{ inputs.context }}
-  - uses: envoyproxy/toolshed/actions/using/steps@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/using/steps@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Run pre steps
     if: ${{ inputs.steps-pre }}
     with:
@@ -242,7 +242,7 @@ runs:
     id: command
     shell: bash
 
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: ${{ always() }}
     id: started
     with:
@@ -276,21 +276,21 @@ runs:
     env:
       COMMAND: ${{ steps.command.outputs.command }}
       TARGET_PATH: ${{ inputs.working-directory }}
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: cancelled
     if: ${{ cancelled() }}
     with:
       options: -r
       filter: |
         true
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: ${{ always() }}
     id: completed
     with:
       options: -r
       filter: now
 
-  - uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: ${{ ! (cancelled() || fromJSON(steps.cancelled.outputs.value || 'false')) }}
     with:
       input-format: string-path
@@ -309,7 +309,7 @@ runs:
              error: $error_match,
              fail: $fail_match})
 
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Generate run context
     id: context
     if: ${{ always() }}
@@ -330,7 +330,7 @@ runs:
         | {"run": .,
            "context": ${{ inputs.context || '{}' }}}
 
-  - uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: ${{ inputs.container-output && ( ! (cancelled() || fromJSON(steps.cancelled.outputs.value || 'false'))) }}
     with:
       input: |
@@ -350,47 +350,47 @@ runs:
               | "\($dir)/\($v)" as $target
               | "mkdir -p $(dirname \($dir_target))\n\(env.CONTAINER_COMMAND) cp -a \($k) \($target)")
         | join("\n")
-  - uses: envoyproxy/toolshed/actions/using/steps@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/using/steps@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Run post steps
     if: ${{ inputs.steps-post && ! (fromJSON(steps.context.outputs.value).run.cancelled || cancelled()) }}
     with:
       name: ${{ inputs.steps-post-name }}
       steps: ${{ inputs.steps-post }}
       context: ${{ steps.context.outputs.value }}
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: post-failed
     if: ${{ failure() && inputs.upload-name && inputs.upload-path }}
     with:
       input: ${{ steps.context.outputs.value }}
       filter: |
         .run["post-steps-failed"] = true
-  - uses: envoyproxy/toolshed/actions/using/steps@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/using/steps@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Post report
     if: ${{ inputs.report-post && ! (fromJSON(steps.context.outputs.value).run.cancelled || cancelled()) }}
     with:
       steps: ${{ inputs.report-post }}
       context: ${{ steps.context.outputs.value }}
-  - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
+  - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f  # v7.0.0
     name: Upload artefacts
     if: ${{ inputs.upload-name && inputs.upload-path && ! (fromJSON(steps.context.outputs.value).run.cancelled || cancelled()) }}
     with:
       name: ${{ inputs.upload-name }}
       path: ${{ startsWith(inputs.upload-path, '/') && inputs.upload-path || format('{0}/{1}', runner.temp, inputs.upload-path) }}
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: upload-failed
     if: ${{ failure() && inputs.upload-name && inputs.upload-path }}
     with:
       input: ${{ steps.post-failed.outputs.value || steps.context.outputs.value }}
       filter: |
         .run["upload-failed"] = true
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: run-cancelled
     if: ${{ cancelled() }}
     with:
       input: ${{ steps.post-failed.outputs.value || steps.context.outputs.value }}
       filter: |
         .run["cancelled"] = true
-  - uses: envoyproxy/toolshed/actions/using/steps@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/using/steps@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Job summary
     if: ${{ always() && inputs.summary-post }}
     with:
@@ -411,7 +411,7 @@ runs:
     id: report
     shell: bash
     if: ${{ always() }}
-  - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
+  - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f  # v7.0.0
     name: Upload report
     if: ${{ always() && steps.report.outputs.path }}
     with:
diff --git a/actions/github/should-run/action.yml b/actions/github/should-run/action.yml
index dede9c4a5c..605f40f438 100644
--- a/actions/github/should-run/action.yml
+++ b/actions/github/should-run/action.yml
@@ -37,11 +37,11 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+  - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
     if: inputs.checkout-repo
     with:
       fetch-depth: 0
-  - uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: changed
     with:
       input: |
@@ -59,20 +59,20 @@ runs:
       result-filter: |
         rtrimstr("\n")
         | split("\n")
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: config
     with:
       input: ${{ inputs.config }}
       input-format: yaml
       filter: |
         {"check": .}
-  - uses: envoyproxy/toolshed/actions/torun@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/torun@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: torun
     with:
       event: ${{ inputs.event }}
       paths: ${{ steps.changed.outputs.output }}
       config: ${{ steps.config.outputs.value }}
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: check
     with:
       input: ${{ steps.torun.outputs.runs }}
diff --git a/actions/gpg/action.yml b/actions/gpg/action.yml
index 74adca4352..2af96568b4 100644
--- a/actions/gpg/action.yml
+++ b/actions/gpg/action.yml
@@ -29,14 +29,14 @@ runs:
     id: gpg
     if: >-
       inputs.gpg-key == ''
-    uses: envoyproxy/toolshed/actions/gpg/generate@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/gpg/generate@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       debug: ${{ inputs.debug }}
   - name: Import GPG key
     id: gpg-import
     if: >-
       inputs.gpg-key != ''
-    uses: envoyproxy/toolshed/actions/gpg/import@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/gpg/import@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       key: ${{ inputs.gpg-key }}
       passphrase: ${{ inputs.gpg-password }}
diff --git a/actions/gpg/import/action.yml b/actions/gpg/import/action.yml
index 41f29d0702..461c988385 100644
--- a/actions/gpg/import/action.yml
+++ b/actions/gpg/import/action.yml
@@ -20,12 +20,12 @@ runs:
   steps:
   - name: Import GPG key
     id: import
-    uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec  # v6
+    uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd  # v7.0.0
     with:
       gpg_private_key: ${{ inputs.key }}
       passphrase: ${{ inputs.passphrase }}
 
-  - uses: envoyproxy/toolshed/actions/github/script/run@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/github/script/run@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     if: ${{ inputs.passphrase && inputs.passphrase-path }}
     with:
       run: |
diff --git a/actions/json/table/action.yml b/actions/json/table/action.yml
index f090ec360c..5903f2656b 100644
--- a/actions/json/table/action.yml
+++ b/actions/json/table/action.yml
@@ -90,7 +90,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     name: Generate table
     id: table
     with:
@@ -109,7 +109,7 @@ runs:
                      ${{ inputs.mutate-cells || '.cell' }};
                      ${{ inputs.sanitize-filter || '.' }})
 
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: summary
     if: ${{ steps.table.outputs.value }}
     with:
diff --git a/actions/oci/collector/action.yml b/actions/oci/collector/action.yml
index 4289a3ed13..2d1cf5fffc 100644
--- a/actions/oci/collector/action.yml
+++ b/actions/oci/collector/action.yml
@@ -51,7 +51,7 @@ runs:
   using: composite
   steps:
   - name: Download OCI artifacts
-    uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131  # v7.0.0
+    uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
     with:
       pattern: ${{ inputs.artifacts-pattern }}
       path: ${{ inputs.artifacts-path }}
@@ -80,7 +80,7 @@ runs:
       ls -la ${{ inputs.oci-tmp-path }}
       echo "::endgroup::"
   - name: Buildah operations
-    uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: operations
     with:
       input: |
@@ -117,7 +117,7 @@ runs:
                args: ["push", "--all", $manifest_name, "docker://\($additional_tag)"],
                metadata: {tag: $additional_tag}})]
   - name: Execute buildah operations
-    uses: envoyproxy/toolshed/actions/buildah@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/buildah@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: buildah
     with:
       operations: ${{ steps.operations.outputs.value }}
diff --git a/actions/regctl/install/action.yml b/actions/regctl/install/action.yml
index db4a92fdfa..a0f7188a43 100644
--- a/actions/regctl/install/action.yml
+++ b/actions/regctl/install/action.yml
@@ -19,7 +19,7 @@ runs:
   using: 'composite'
   steps:
   - name: Fetch regctl
-    uses: envoyproxy/toolshed/actions/fetch@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/fetch@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     with:
       url: https://github.com/regclient/regclient/releases/download/${{ inputs.version }}/regctl-linux-${{ inputs.arch }}
       path: /tmp/regctl
diff --git a/actions/source/action.yml b/actions/source/action.yml
index cb4351a391..5a26c0303b 100644
--- a/actions/source/action.yml
+++ b/actions/source/action.yml
@@ -46,7 +46,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: create-tarball
     env:
       SOURCE_ACTION_PATH: ${{ github.action_path }}
diff --git a/actions/test-runner/action.yml b/actions/test-runner/action.yml
index cf23c94da5..effe1cda2e 100644
--- a/actions/test-runner/action.yml
+++ b/actions/test-runner/action.yml
@@ -25,7 +25,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: config
     with:
       input: ${{ inputs.config }}
@@ -50,7 +50,7 @@ runs:
       MOCK_LOG="$(mktemp)"
       echo "MOCK_LOG=${MOCK_LOG}" >> "$GITHUB_ENV"
       echo "${ACTION_TEST_PATH}/mocks:$PATH" >> $GITHUB_PATH
-  - uses: envoyproxy/toolshed/actions/using/steps@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/using/steps@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: run
     with:
       name: Run test
diff --git a/actions/upload/diff/action.yml b/actions/upload/diff/action.yml
index 0d53edf5d0..9b0672c253 100644
--- a/actions/upload/diff/action.yml
+++ b/actions/upload/diff/action.yml
@@ -30,7 +30,7 @@ runs:
     name: Show diff
     if: ${{ inputs.show }}
     shell: bash
-  - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f  # v6.0.0
+  - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f  # v7.0.0
     with:
       name: ${{ inputs.name }}.diff
       path: ${{ steps.diff.outputs.tmpdir }}/${{ inputs.name }}.diff
diff --git a/actions/using/recurse/action.yml b/actions/using/recurse/action.yml
index 6b51b3023e..d9ced04300 100644
--- a/actions/using/recurse/action.yml
+++ b/actions/using/recurse/action.yml
@@ -11,7 +11,7 @@ runs:
   steps:
   # .tmp.action/action.yml **must** be hardcoded
 
-  - uses: envoyproxy/toolshed/actions/jq@d10938876b114aa2a001b43b43158f1bf7008f1a
+  - uses: envoyproxy/toolshed/actions/jq@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     id: yaml
     with:
       input: ${{ inputs.with }}
diff --git a/actions/version/action.yml b/actions/version/action.yml
index 57cfce13bb..fc050f39fb 100644
--- a/actions/version/action.yml
+++ b/actions/version/action.yml
@@ -27,7 +27,7 @@ runs:
   using: composite
   steps:
   - id: version
-    uses: envoyproxy/toolshed/actions/bson@d10938876b114aa2a001b43b43158f1bf7008f1a
+    uses: envoyproxy/toolshed/actions/bson@5e0c5734ee7fc8a30629bd3f54fc910f92285bbe
     env:
       VERSION: ${{ inputs.version }}
       VERSION_FILE: ${{ inputs.version-file }}