diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8cc34a33b..6a62e52b0 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -27,7 +27,7 @@ jobs:
                   libjpeg-dev libopenjp2-7-dev libwebp-dev zlib1g-dev libpq-dev
 
             - name: Install node and npm
-              uses: actions/setup-node@v6
+              uses: actions/setup-node@v7
               with:
                   node-version: '20'
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index ffc72d936..16c842611 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -57,7 +57,7 @@ jobs:
 
             # Initializes the CodeQL tools for scanning.
             - name: Initialize CodeQL
-              uses: github/codeql-action/init@v4.36.3
+              uses: github/codeql-action/init@v4.37.0
               with:
                   languages: ${{ matrix.language }}
                   build-mode: ${{ matrix.build-mode }}
@@ -70,6 +70,6 @@ jobs:
                   pipenv install --dev --deploy
 
             - name: Perform CodeQL Analysis
-              uses: github/codeql-action/analyze@v4.36.3
+              uses: github/codeql-action/analyze@v4.37.0
               with:
                   category: '/language:${{matrix.language}}'
diff --git a/.github/workflows/db_ops.yml b/.github/workflows/db_ops.yml
index 8d443ddee..44875eb11 100644
--- a/.github/workflows/db_ops.yml
+++ b/.github/workflows/db_ops.yml
@@ -36,7 +36,7 @@ jobs:
                   persist-credentials: false
 
             - name: Configure AWS Credentials
-              uses: aws-actions/configure-aws-credentials@v6.2.1
+              uses: aws-actions/configure-aws-credentials@6.2.2
               with:
                   aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
                   aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/dev-main-deploy.yml b/.github/workflows/dev-main-deploy.yml
index c7cfabf7e..eef96794c 100644
--- a/.github/workflows/dev-main-deploy.yml
+++ b/.github/workflows/dev-main-deploy.yml
@@ -40,7 +40,7 @@ jobs:
                   libjpeg-dev libopenjp2-7-dev libwebp-dev zlib1g-dev libpq-dev
 
             - name: Install node and npm
-              uses: actions/setup-node@v6
+              uses: actions/setup-node@v7
               with:
                   node-version: '20'
 
@@ -70,7 +70,7 @@ jobs:
                   echo "version_number=$(echo "${FULL_VERSION_NUMBER}" | cut -d '+' -f 1)" >> $GITHUB_ENV
 
             - name: configure aws credentials
-              uses: aws-actions/configure-aws-credentials@v6.2.1
+              uses: aws-actions/configure-aws-credentials@6.2.2
               with:
                   aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
                   aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/feature-branch-deploy.yml b/.github/workflows/feature-branch-deploy.yml
index 7e5b74280..9ccdd4433 100644
--- a/.github/workflows/feature-branch-deploy.yml
+++ b/.github/workflows/feature-branch-deploy.yml
@@ -35,7 +35,7 @@ jobs:
                   libjpeg-dev libopenjp2-7-dev libwebp-dev zlib1g-dev libpq-dev
 
             - name: Install node and npm
-              uses: actions/setup-node@v6
+              uses: actions/setup-node@v7
               with:
                   node-version: '20'
 
@@ -66,7 +66,7 @@ jobs:
                   echo "version_number=$(echo "${FULL_VERSION_NUMBER}" | cut -d '+' -f 1)" >> $GITHUB_ENV
 
             - name: configure aws credentials
-              uses: aws-actions/configure-aws-credentials@v6.2.1
+              uses: aws-actions/configure-aws-credentials@6.2.2
               with:
                   aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
                   aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/prod-deploy.yml b/.github/workflows/prod-deploy.yml
index 7fea975a3..cdbf93241 100644
--- a/.github/workflows/prod-deploy.yml
+++ b/.github/workflows/prod-deploy.yml
@@ -19,7 +19,7 @@ jobs:
 
         steps:
             - name: configure aws credentials
-              uses: aws-actions/configure-aws-credentials@v6.2.1
+              uses: aws-actions/configure-aws-credentials@6.2.2
               with:
                   aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
                   aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/stage-hotfix-rel-deploy.yml b/.github/workflows/stage-hotfix-rel-deploy.yml
index de35ecf8b..b3cd9ab89 100644
--- a/.github/workflows/stage-hotfix-rel-deploy.yml
+++ b/.github/workflows/stage-hotfix-rel-deploy.yml
@@ -25,7 +25,7 @@ jobs:
                   libjpeg-dev libopenjp2-7-dev libwebp-dev zlib1g-dev libpq-dev
 
             - name: Install node and npm
-              uses: actions/setup-node@v6
+              uses: actions/setup-node@v7
               with:
                   node-version: '20'
 
@@ -52,7 +52,7 @@ jobs:
                   echo "version_number=$(echo "${HOTFIX_VERSION_NUMBER}" | cut -d '-' -f 1 | cut -c 2- )" >> $GITHUB_ENV
 
             - name: configure aws credentials
-              uses: aws-actions/configure-aws-credentials@v6.2.1
+              uses: aws-actions/configure-aws-credentials@6.2.2
               with:
                   aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
                   aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/stage-image-refresh.yml b/.github/workflows/stage-image-refresh.yml
index aa0476fb1..d7d3233d0 100644
--- a/.github/workflows/stage-image-refresh.yml
+++ b/.github/workflows/stage-image-refresh.yml
@@ -25,7 +25,7 @@ jobs:
                   libjpeg-dev libopenjp2-7-dev libwebp-dev zlib1g-dev libpq-dev
 
             - name: Install node and npm
-              uses: actions/setup-node@v6
+              uses: actions/setup-node@v7
               with:
                   node-version: '20'
 
@@ -55,7 +55,7 @@ jobs:
                   echo "tag_stale_image=$(echo "${FULL_VERSION_NUMBER}" | cut -c2- )_$(date +%Y%m%dT%H%M%S)" >> $GITHUB_ENV
 
             - name: configure aws credentials
-              uses: aws-actions/configure-aws-credentials@v6.2.1
+              uses: aws-actions/configure-aws-credentials@6.2.2
               with:
                   aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
                   aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/stage-release-deploy.yml b/.github/workflows/stage-release-deploy.yml
index 00b58cb366..59bcaddb5 100644
--- a/.github/workflows/stage-release-deploy.yml
+++ b/.github/workflows/stage-release-deploy.yml
@@ -40,7 +40,7 @@ jobs:
                   libjpeg-dev libopenjp2-7-dev libwebp-dev zlib1g-dev libpq-dev
 
             - name: Install node and npm
-              uses: actions/setup-node@v6
+              uses: actions/setup-node@v7
               with:
                   node-version: '20'
 
@@ -67,7 +67,7 @@ jobs:
                   echo "version_number=$(echo "${FULL_VERSION_NUMBER}" | cut -c2- )" >> $GITHUB_ENV
 
             - name: configure aws credentials
-              uses: aws-actions/configure-aws-credentials@v6.2.1
+              uses: aws-actions/configure-aws-credentials@6.2.2
               with:
                   aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
                   aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/test-main-deploy.yml b/.github/workflows/test-main-deploy.yml
index 4fc99560f..1053f7815 100644
--- a/.github/workflows/test-main-deploy.yml
+++ b/.github/workflows/test-main-deploy.yml
@@ -19,7 +19,7 @@ jobs:
 
         steps:
             - name: configure aws credentials
-              uses: aws-actions/configure-aws-credentials@v6.2.1
+              uses: aws-actions/configure-aws-credentials@6.2.2
               with:
                   aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
                   aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 501ce6c9e..e30a91c25 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -53,7 +53,7 @@ jobs:
                   tesseract-ocr tesseract-ocr-all
 
             - name: Install node and npm
-              uses: actions/setup-node@v6
+              uses: actions/setup-node@v7
               with:
                   node-version: '20'