diff --git a/.github/workflows/__build-documentation.yml b/.github/workflows/__build-documentation.yml
index 2cb4d7b6..61d8e438 100644
--- a/.github/workflows/__build-documentation.yml
+++ b/.github/workflows/__build-documentation.yml
@@ -32,9 +32,9 @@ jobs:
           virtualenvs-in-project: true
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
-          python-version: 3.12
+          python-version: 3.15
 
       - name: Load Cached Venv
         id: cached-poetry-dependencies
diff --git a/.github/workflows/__build.yml b/.github/workflows/__build.yml
index cbcbca0b..c3fcdd03 100644
--- a/.github/workflows/__build.yml
+++ b/.github/workflows/__build.yml
@@ -74,7 +74,7 @@ jobs:
           key: venv-${{ runner.os }}-${{ hashFiles('**/poetry.lock') }}-${{ inputs.python-version }}
 
       - name: Set up Python ${{ inputs.python-version }}
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: ${{ inputs.python-version }}
 
@@ -87,7 +87,7 @@ jobs:
 
       - name: Upload Artifact
         if: inputs.release-tag != 'null'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: build-artifact-${{ inputs.environment }}
           path: dist/
@@ -122,7 +122,7 @@ jobs:
           ref: ${{ inputs.build-branch }}
 
       - name: Set up Node
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           cache: npm
           cache-dependency-path: ${{ inputs.node-build-directory }}/package-lock.json
@@ -156,7 +156,7 @@ jobs:
 
       - name: Upload Artifact
         if: inputs.release-tag != 'null'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: build-artifact-${{ inputs.environment }}
           path: ${{ inputs.node-build-directory }}/${{ env.ARTIFACT_NAME }}
diff --git a/.github/workflows/__ci-deployment.yml b/.github/workflows/__ci-deployment.yml
index b4793c8a..75c7883a 100644
--- a/.github/workflows/__ci-deployment.yml
+++ b/.github/workflows/__ci-deployment.yml
@@ -81,7 +81,7 @@ jobs:
 
       - name: Draft Release
         id: draft-release
-        uses: release-drafter/release-drafter@34d80673e067bdc0c24568d3af899c216adcfaa9 # v7.7.0
+        uses: release-drafter/release-drafter@978bb0b30c5ee8cdd332ced253758157150d43f0 # v7.10.0
         env:
           GITHUB_TOKEN: ${{ secrets.WORGARSIDE_DEV_TOKEN }}
         with:
diff --git a/.github/workflows/__deploy-documentation.yml b/.github/workflows/__deploy-documentation.yml
index 8d75083f..6196ce45 100644
--- a/.github/workflows/__deploy-documentation.yml
+++ b/.github/workflows/__deploy-documentation.yml
@@ -29,6 +29,6 @@ jobs:
 
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
+        uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5.0.1
         with:
           token: ${{ secrets.WORGARSIDE_DEV_TOKEN }}
diff --git a/.github/workflows/__deploy.yml b/.github/workflows/__deploy.yml
index 32d61866..289a598e 100644
--- a/.github/workflows/__deploy.yml
+++ b/.github/workflows/__deploy.yml
@@ -50,7 +50,7 @@ jobs:
     if: inputs.release-tag != 'null' && !startsWith(inputs.deploy-to, 'submodule:')
     steps:
       - name: Download Artifact
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: build-artifact-${{ inputs.environment }}
           path: dist/
@@ -97,13 +97,13 @@ jobs:
       - opentofu
     steps:
       - name: Download Artifact
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: build-artifact-${{ inputs.environment }}
           path: dist/
 
       - name: Deploy to PyPI
-        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
+        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3
         continue-on-error: ${{ inputs.environment == 'development' }}
         with:
           password: ${{ secrets.PYPI_API_TOKEN }}
diff --git a/.github/workflows/__prek-autoupdate.yml b/.github/workflows/__prek-autoupdate.yml
index 7edbaf89..08520e95 100644
--- a/.github/workflows/__prek-autoupdate.yml
+++ b/.github/workflows/__prek-autoupdate.yml
@@ -45,7 +45,7 @@ jobs:
         run: git checkout -b ${{ env.BRANCH }}
 
       - name: Install uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
 
       - name: Install prek
         run: |
diff --git a/.github/workflows/__prek-hooks.yml b/.github/workflows/__prek-hooks.yml
index 6e4bb974..5cc5a16d 100644
--- a/.github/workflows/__prek-hooks.yml
+++ b/.github/workflows/__prek-hooks.yml
@@ -45,7 +45,7 @@ jobs:
 
       - name: Install uv
         if: inputs.python-version
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
         with:
           enable-cache: >-
             ${{ inputs.sync-project-dependencies == 'true'
@@ -59,7 +59,7 @@ jobs:
 
       - name: Run prek
         id: run-prek
-        uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0
+        uses: j178/prek-action@44924fe9ef4a6f88253c4b6b1bf11c689d3ce53d # v3.1.0
         continue-on-error: true
         with:
           prek-version: ${{ inputs.prek-version }}
diff --git a/.github/workflows/__semantic-release.yml b/.github/workflows/__semantic-release.yml
index 0513b06e..84323a17 100644
--- a/.github/workflows/__semantic-release.yml
+++ b/.github/workflows/__semantic-release.yml
@@ -70,7 +70,7 @@ jobs:
           token: ${{ secrets.WORGARSIDE_DEV_TOKEN }}
 
       - name: Set up Python
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
         with:
           python-version: ${{ inputs.python-version }}
           activate-environment: true
diff --git a/.github/workflows/__standard-pr-checks.yml b/.github/workflows/__standard-pr-checks.yml
index 88674994..ca660004 100644
--- a/.github/workflows/__standard-pr-checks.yml
+++ b/.github/workflows/__standard-pr-checks.yml
@@ -80,7 +80,7 @@ jobs:
         id: title
         if: inputs.validate-title && steps.pr.outputs.open == 'true'
         continue-on-error: true
-        uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1
+        uses: amannn/action-semantic-pull-request@2252a14e810aa9b85c2d560bd7070c802206ecf6 # v6.1.2
         env:
           GITHUB_TOKEN: ${{ secrets.WORGARSIDE_DEV_TOKEN }}
         with:
diff --git a/.github/workflows/__test.yml b/.github/workflows/__test.yml
index 18f3deeb..f2f38982 100644
--- a/.github/workflows/__test.yml
+++ b/.github/workflows/__test.yml
@@ -58,7 +58,7 @@ jobs:
           key: venv-${{ runner.os }}-${{ hashFiles('**/poetry.lock') }}-${{ matrix.python-version }}
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -82,7 +82,7 @@ jobs:
         if: >-
           matrix.python-version == inputs.python-version &&
           steps.install-dependencies.outcome == 'success'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: coverage-report-${{ github.run_id }}
           path: ./coverage.xml
@@ -91,7 +91,7 @@ jobs:
         if: >-
           matrix.python-version == inputs.python-version &&
           steps.install-dependencies.outcome == 'success'
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           flags: unittests
           fail_ci_if_error: true
diff --git a/.github/workflows/__unit-tests.yml b/.github/workflows/__unit-tests.yml
index c62b5d95..e9bd3909 100644
--- a/.github/workflows/__unit-tests.yml
+++ b/.github/workflows/__unit-tests.yml
@@ -36,7 +36,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
         with:
           enable-cache: ${{ runner.environment == 'github-hosted' }}
           cache-local-path: ${{ runner.tool_cache }}/uv-cache
diff --git a/.github/workflows/_reject-stale-deployments.yaml b/.github/workflows/_reject-stale-deployments.yaml
index 5a62b031..371d27d1 100644
--- a/.github/workflows/_reject-stale-deployments.yaml
+++ b/.github/workflows/_reject-stale-deployments.yaml
@@ -21,7 +21,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Install uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
         with:
           enable-cache: ${{ runner.environment == 'github-hosted' }}
           cache-local-path: ${{ runner.tool_cache }}/uv-cache
diff --git a/.github/workflows/sync.yml b/.github/workflows/sync.yml
index 249f01e6..924ba2ec 100644
--- a/.github/workflows/sync.yml
+++ b/.github/workflows/sync.yml
@@ -29,7 +29,7 @@ jobs:
 
       - name: Run GitHub File Sync
         id: sync
-        uses: raven-actions/repo-files-sync@bb4d579be65a4086050c7e5441fb6f69a382db07 # v0.1.0-rc.17
+        uses: raven-actions/repo-files-sync@511c602835ac7dd8529673f91afe348db8d08185 # v0.1.0-rc.18
         with:
           GH_TOKEN: ${{ secrets.WORGARSIDE_DEV_TOKEN }}
           CONFIG_PATH: gha_sync/config.yml
diff --git a/gha_sync/workflows/repo/home-assistant-config-validator/integration-test.yml b/gha_sync/workflows/repo/home-assistant-config-validator/integration-test.yml
index 4baf4559..ec7efc6f 100644
--- a/gha_sync/workflows/repo/home-assistant-config-validator/integration-test.yml
+++ b/gha_sync/workflows/repo/home-assistant-config-validator/integration-test.yml
@@ -59,7 +59,7 @@ jobs:
           token: ${{ secrets.WORGARSIDE_DEV_TOKEN }}
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
         with:
           enable-cache: ${{ runner.environment == 'github-hosted' }}
           cache-local-path: ${{ runner.tool_cache }}/uv-cache
diff --git a/gha_sync/workflows/template/codspeed.template.yml b/gha_sync/workflows/template/codspeed.template.yml
index 0610c8d9..4d46b851 100644
--- a/gha_sync/workflows/template/codspeed.template.yml
+++ b/gha_sync/workflows/template/codspeed.template.yml
@@ -53,7 +53,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
         with:
           enable-cache: "{% raw %}${{ runner.environment == 'github-hosted' }}{% endraw %}"
           cache-local-path: '{% raw %}${{ runner.tool_cache }}/uv-cache{% endraw %}'
@@ -63,7 +63,7 @@ jobs:
         run: uv sync --locked --all-groups
 
       - name: Run Benchmarks
-        uses: CodSpeedHQ/action@373d6868929f444bc08d901fd0eb0ad52a8875ea # v5.2.1
+        uses: CodSpeedHQ/action@af75f77f17a054769abefaa42fe8dc2975469b5f # v5.6.3
         with:
           mode: simulation
           token: '{{ token }}'