diff --git a/.github/workflows/eslint.yml b/.github/workflows/eslint.yml
index 8323c7677a..269b77a39b 100644
--- a/.github/workflows/eslint.yml
+++ b/.github/workflows/eslint.yml
@@ -95,7 +95,7 @@ jobs:
         if: ${{ steps.targets.outputs.packages != '' || steps.filter.outputs.playwright == 'true' }}
         with:
           node-version: 24
-      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413
         if: ${{ steps.targets.outputs.packages != '' || steps.filter.outputs.playwright == 'true' }}
         with:
           version: 11
diff --git a/.github/workflows/generate-docs.yml b/.github/workflows/generate-docs.yml
index afabd38ec1..ed04d99e34 100644
--- a/.github/workflows/generate-docs.yml
+++ b/.github/workflows/generate-docs.yml
@@ -52,7 +52,7 @@ jobs:
           node-version: 24
           registry-url: "https://registry.npmjs.org"
 
-      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
         with:
           version: 11
 
diff --git a/.github/workflows/playwright-firefox-nightly.yml b/.github/workflows/playwright-firefox-nightly.yml
index f42df6180d..617143dbb1 100644
--- a/.github/workflows/playwright-firefox-nightly.yml
+++ b/.github/workflows/playwright-firefox-nightly.yml
@@ -44,7 +44,7 @@ jobs:
         with:
           node-version: 24
       - uses: ./.github/actions/build-cosmos
-      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
         with:
           version: 11
       - uses: ./.github/actions/setup-playwright
diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml
index f82a08deed..8796e9aba8 100644
--- a/.github/workflows/playwright.yml
+++ b/.github/workflows/playwright.yml
@@ -64,7 +64,7 @@ jobs:
         with:
           node-version: 24
       - uses: ./.github/actions/build-cosmos
-      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
         with:
           version: 11
       - uses: ./.github/actions/setup-playwright
diff --git a/.github/workflows/python_lint.yml b/.github/workflows/python_lint.yml
index 67a2efa9fd..94268ac4a5 100644
--- a/.github/workflows/python_lint.yml
+++ b/.github/workflows/python_lint.yml
@@ -104,7 +104,7 @@ jobs:
         # security-events, so tolerate the upload failing there rather than
         # failing the job for every outside contributor
         continue-on-error: true
-        uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
         with:
           sarif_file: openc3/python/uv-audit.sarif
           category: uv-audit
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8abb6abe56..b5de8992af 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -105,7 +105,7 @@ jobs:
       - name: Build Python Package
         working-directory: openc3/python
         run: python -m build
-      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
         with:
           version: 11
       - name: Build pnpm Packages
diff --git a/.github/workflows/shell_lint.yml b/.github/workflows/shell_lint.yml
index 208cc4e9ac..7af1fff23f 100644
--- a/.github/workflows/shell_lint.yml
+++ b/.github/workflows/shell_lint.yml
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/tool.yml b/.github/workflows/tool.yml
index 070de16ed4..c6911e76f4 100644
--- a/.github/workflows/tool.yml
+++ b/.github/workflows/tool.yml
@@ -49,7 +49,7 @@ jobs:
         with:
           node-version: 24
       - name: Install pnpm
-        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
+        uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
         with:
           version: 11
       - uses: ./.github/actions/build-cosmos