diff --git a/.github/workflows/client-release-py.yaml b/.github/workflows/client-release-py.yaml
index 42adc7fc..d71b96e1 100644
--- a/.github/workflows/client-release-py.yaml
+++ b/.github/workflows/client-release-py.yaml
@@ -28,7 +28,7 @@ jobs:
           python-version: "3.13"
 
       - name: Install uv
-        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b
         with:
           version: "latest"
 
diff --git a/.github/workflows/client-release-ts.yaml b/.github/workflows/client-release-ts.yaml
index e0af6e27..19e64243 100644
--- a/.github/workflows/client-release-ts.yaml
+++ b/.github/workflows/client-release-ts.yaml
@@ -22,7 +22,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Set up Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: '22'
           registry-url: 'https://registry.npmjs.org'
diff --git a/.github/workflows/client-test-py.yaml b/.github/workflows/client-test-py.yaml
index f4f5d562..67b162ac 100644
--- a/.github/workflows/client-test-py.yaml
+++ b/.github/workflows/client-test-py.yaml
@@ -28,7 +28,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Install uv
-        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b
 
       - name: Set up Python
         run: uv python install 3.13
diff --git a/.github/workflows/client-test-ts.yaml b/.github/workflows/client-test-ts.yaml
index a59a965a..1d74c8cc 100644
--- a/.github/workflows/client-test-ts.yaml
+++ b/.github/workflows/client-test-ts.yaml
@@ -28,7 +28,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Set up Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: '22'
           cache: "npm"
diff --git a/.github/workflows/core-test.yaml b/.github/workflows/core-test.yaml
index 46b30891..0da3816c 100644
--- a/.github/workflows/core-test.yaml
+++ b/.github/workflows/core-test.yaml
@@ -36,7 +36,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Install uv
-        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b
 
       - name: Set up Python
         run: uv python install
diff --git a/.github/workflows/dashboard-test.yaml b/.github/workflows/dashboard-test.yaml
index dfe7b33d..04407d9a 100644
--- a/.github/workflows/dashboard-test.yaml
+++ b/.github/workflows/dashboard-test.yaml
@@ -31,12 +31,12 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320
+        uses: pnpm/action-setup@078e9d416474b29c0c387560859308974f7e9c53
         with:
           version: 10
 
       - name: Set up Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: "22"
           cache: "pnpm"
diff --git a/.github/workflows/docs-test.yaml b/.github/workflows/docs-test.yaml
index 16ff1e80..2c4b3a2d 100644
--- a/.github/workflows/docs-test.yaml
+++ b/.github/workflows/docs-test.yaml
@@ -31,12 +31,12 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Set up pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320
+        uses: pnpm/action-setup@078e9d416474b29c0c387560859308974f7e9c53
         with:
           version: 10
 
       - name: Set up Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: "22"
           cache: "pnpm"
diff --git a/.github/workflows/landingpage-test.yaml b/.github/workflows/landingpage-test.yaml
index 85fdc963..9ac8b482 100644
--- a/.github/workflows/landingpage-test.yaml
+++ b/.github/workflows/landingpage-test.yaml
@@ -31,12 +31,12 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320
+        uses: pnpm/action-setup@078e9d416474b29c0c387560859308974f7e9c53
         with:
           version: 10
 
       - name: Set up Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: "22"
           cache: "pnpm"
@@ -71,12 +71,12 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320
+        uses: pnpm/action-setup@078e9d416474b29c0c387560859308974f7e9c53
         with:
           version: 10
 
       - name: Set up Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: "22"
           cache: "pnpm"
@@ -106,12 +106,12 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320
+        uses: pnpm/action-setup@078e9d416474b29c0c387560859308974f7e9c53
         with:
           version: 10
 
       - name: Set up Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: "22"
           cache: "pnpm"
diff --git a/.github/workflows/package-release-claude-code.yaml b/.github/workflows/package-release-claude-code.yaml
index 6d210b54..e5958983 100644
--- a/.github/workflows/package-release-claude-code.yaml
+++ b/.github/workflows/package-release-claude-code.yaml
@@ -21,7 +21,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Set up Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: '22'
 
diff --git a/.github/workflows/package-release-openclaw.yaml b/.github/workflows/package-release-openclaw.yaml
index 509a1649..1c59e411 100644
--- a/.github/workflows/package-release-openclaw.yaml
+++ b/.github/workflows/package-release-openclaw.yaml
@@ -22,7 +22,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Set up Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: '22'
           registry-url: 'https://registry.npmjs.org'
diff --git a/.github/workflows/package-release-sandbox-cloudflare.yaml b/.github/workflows/package-release-sandbox-cloudflare.yaml
index 3f8ee816..45d8a72c 100644
--- a/.github/workflows/package-release-sandbox-cloudflare.yaml
+++ b/.github/workflows/package-release-sandbox-cloudflare.yaml
@@ -22,7 +22,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Set up Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: '22'
           registry-url: 'https://registry.npmjs.org'
diff --git a/.github/workflows/package-test-claude-code.yaml b/.github/workflows/package-test-claude-code.yaml
index 3e7b4750..3fcd7188 100644
--- a/.github/workflows/package-test-claude-code.yaml
+++ b/.github/workflows/package-test-claude-code.yaml
@@ -31,7 +31,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Set up Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: '22'
 
diff --git a/.github/workflows/package-test-openclaw.yaml b/.github/workflows/package-test-openclaw.yaml
index 0d9d6519..0473586c 100644
--- a/.github/workflows/package-test-openclaw.yaml
+++ b/.github/workflows/package-test-openclaw.yaml
@@ -31,7 +31,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Set up Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: '22'
 
diff --git a/.github/workflows/package-test-sandbox-cloudflare.yaml b/.github/workflows/package-test-sandbox-cloudflare.yaml
index bedba72c..6b77e45a 100644
--- a/.github/workflows/package-test-sandbox-cloudflare.yaml
+++ b/.github/workflows/package-test-sandbox-cloudflare.yaml
@@ -46,7 +46,7 @@ jobs:
           echo "Versions are consistent."
 
       - name: Set up Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: '22'
 
diff --git a/.github/workflows/security-reusable.yaml b/.github/workflows/security-reusable.yaml
index c9705cc0..dacaf0c2 100644
--- a/.github/workflows/security-reusable.yaml
+++ b/.github/workflows/security-reusable.yaml
@@ -41,7 +41,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Install uv
-        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b
       - name: Setup Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
         with:
@@ -90,13 +90,13 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Setup Node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: '22'
           cache: 'npm'
           cache-dependency-path: src/client/acontext-ts/package-lock.json
       - name: Setup pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320
+        uses: pnpm/action-setup@078e9d416474b29c0c387560859308974f7e9c53
         with:
           version: 10
       - name: Audit TS SDK
diff --git a/.github/workflows/ui-test.yaml b/.github/workflows/ui-test.yaml
index 6de6142c..c25e26a1 100644
--- a/.github/workflows/ui-test.yaml
+++ b/.github/workflows/ui-test.yaml
@@ -31,12 +31,12 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320
+        uses: pnpm/action-setup@078e9d416474b29c0c387560859308974f7e9c53
         with:
           version: 10
 
       - name: Set up Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: "22"
           cache: "pnpm"