diff --git a/.github/workflows/__greetings.yml b/.github/workflows/__greetings.yml
index 15582c91..9152ad16 100644
--- a/.github/workflows/__greetings.yml
+++ b/.github/workflows/__greetings.yml
@@ -11,7 +11,7 @@ permissions: {}
 
 jobs:
   greetings:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
     permissions:
       contents: read
       issues: write
diff --git a/.github/workflows/__main-ci.yml b/.github/workflows/__main-ci.yml
index 7e95407f..7e8f2e68 100644
--- a/.github/workflows/__main-ci.yml
+++ b/.github/workflows/__main-ci.yml
@@ -91,7 +91,7 @@ jobs:
   release:
     needs: ci
     if: github.event_name != 'schedule'
-    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@1ee0354c40e4cd0a46c69cbe305c74fc67338042 # 0.28.0
+    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@a0a9d185c51c10710a5987822e78feb2b5ce1932 # 0.29.0
     permissions:
       contents: read
     with:
diff --git a/.github/workflows/__need-fix-to-issue.yml b/.github/workflows/__need-fix-to-issue.yml
index 5fa60af1..fd829777 100644
--- a/.github/workflows/__need-fix-to-issue.yml
+++ b/.github/workflows/__need-fix-to-issue.yml
@@ -21,7 +21,7 @@ permissions: {}
 
 jobs:
   main:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
     permissions:
       contents: read
       issues: write
diff --git a/.github/workflows/__renovate.yml b/.github/workflows/__renovate.yml
index 07fc8ab2..8ef4ae55 100644
--- a/.github/workflows/__renovate.yml
+++ b/.github/workflows/__renovate.yml
@@ -19,7 +19,7 @@ jobs:
     steps:
       - name: Generate GitHub App token
         id: generate-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ vars.CI_BOT_APP_CLIENT_ID }}
           private-key: ${{ secrets.CI_BOT_APP_PRIVATE_KEY }} # zizmor: ignore[secrets-outside-env]
diff --git a/.github/workflows/__semantic-pull-request.yml b/.github/workflows/__semantic-pull-request.yml
index 3fefe3e2..cc2a85e5 100644
--- a/.github/workflows/__semantic-pull-request.yml
+++ b/.github/workflows/__semantic-pull-request.yml
@@ -12,7 +12,7 @@ permissions: {}
 
 jobs:
   main:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/__shared-ci.yml b/.github/workflows/__shared-ci.yml
index 2763ae92..7c5fd2f9 100644
--- a/.github/workflows/__shared-ci.yml
+++ b/.github/workflows/__shared-ci.yml
@@ -11,7 +11,7 @@ permissions: {}
 
 jobs:
   linter:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
     permissions:
       actions: read
       contents: read
diff --git a/.github/workflows/__stale.yml b/.github/workflows/__stale.yml
index b827a283..848eadfc 100644
--- a/.github/workflows/__stale.yml
+++ b/.github/workflows/__stale.yml
@@ -9,7 +9,7 @@ permissions: {}
 
 jobs:
   main:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
     permissions:
       issues: write
       pull-requests: write
diff --git a/.github/workflows/docker-build-images.yml b/.github/workflows/docker-build-images.yml
index fddd9725..e6cebe4f 100644
--- a/.github/workflows/docker-build-images.yml
+++ b/.github/workflows/docker-build-images.yml
@@ -400,7 +400,7 @@ jobs:
       issues: read
       packages: write
     steps:
-      - uses: hoverkraft-tech/ci-github-common/actions/checkout@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+      - uses: hoverkraft-tech/ci-github-common/actions/checkout@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
         with:
           lfs: ${{ inputs.lfs }}
 
@@ -409,11 +409,11 @@ jobs:
         run: git lfs pull
 
       - id: local-workflow-actions
-        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
         with:
           actions-path: actions
 
-      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+      - uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         if: inputs.build-secret-github-app-client-id
         id: generate-token
         with:
@@ -482,7 +482,7 @@ jobs:
 
       # FIXME: Set built images infos in file to be uploaded as artifacts, because github action does not handle job outputs for matrix
       # https://github.com/orgs/community/discussions/26639
-      - uses: hoverkraft-tech/ci-github-common/actions/set-matrix-output@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+      - uses: hoverkraft-tech/ci-github-common/actions/set-matrix-output@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
         with:
           artifact-name: ${{ needs.prepare-variables.outputs.artifact-name }}
           value: ${{ steps.build.outputs.built-image }}
@@ -501,7 +501,7 @@ jobs:
       built-images: ${{ steps.create-images-manifests.outputs.built-images }}
     steps:
       - id: get-matrix-outputs
-        uses: hoverkraft-tech/ci-github-common/actions/get-matrix-outputs@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+        uses: hoverkraft-tech/ci-github-common/actions/get-matrix-outputs@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
         with:
           artifact-name: ${{ needs.prepare-variables.outputs.artifact-name }}
 
@@ -539,7 +539,7 @@ jobs:
             core.setOutput('built-images', JSON.stringify(images));
 
       - id: local-workflow-actions
-        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
         with:
           actions-path: actions
 
@@ -622,7 +622,7 @@ jobs:
         image: ${{ fromJson(needs.publish-manifests.outputs.attestation-images) }}
     steps:
       - id: local-workflow-actions
-        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
         with:
           actions-path: actions
 
diff --git a/.github/workflows/prune-pull-requests-images-tags.yml b/.github/workflows/prune-pull-requests-images-tags.yml
index 50821641..f53b3695 100644
--- a/.github/workflows/prune-pull-requests-images-tags.yml
+++ b/.github/workflows/prune-pull-requests-images-tags.yml
@@ -106,7 +106,7 @@ jobs:
       packages: write
     steps:
       - id: is-organization-or-user
-        uses: hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+        uses: hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
 
       - name: Wait for package visibility
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
@@ -153,7 +153,7 @@ jobs:
             }
 
       - id: local-workflow-actions
-        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
         with:
           actions-path: actions
 
diff --git a/actions/docker/build-image/action.yml b/actions/docker/build-image/action.yml
index 36446005..530eae8b 100644
--- a/actions/docker/build-image/action.yml
+++ b/actions/docker/build-image/action.yml
@@ -151,12 +151,12 @@ outputs:
 runs:
   using: "composite"
   steps:
-    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
       with:
         source-path: ${{ github.action_path }}/../..
 
     - id: slugify-platform
-      uses: hoverkraft-tech/ci-github-common/actions/slugify@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+      uses: hoverkraft-tech/ci-github-common/actions/slugify@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
       with:
         value: ${{ inputs.platform }}
 
@@ -330,7 +330,7 @@ runs:
     # Caching setup
     - if: steps.get-docker-config.outputs.cache-disabled != 'true'
       id: cache-arguments
-      uses: int128/docker-build-cache-config-action@97740da6c51c4bcd68c7519e2179e6a93389b027 # v1.71.0
+      uses: int128/docker-build-cache-config-action@7f0a2da4eefd1dd9fbb24fd8ef573ffe85cdf09f # v1.72.0
       with:
         image: ${{ steps.get-docker-config.outputs.cache-image }}
         flavor: ${{ steps.get-docker-config.outputs.cache-flavor }}
diff --git a/actions/helm/generate-docs/action.yml b/actions/helm/generate-docs/action.yml
index c35ca59f..eed0a4bd 100644
--- a/actions/helm/generate-docs/action.yml
+++ b/actions/helm/generate-docs/action.yml
@@ -145,7 +145,7 @@ runs:
           core.setOutput("markdownlint-config-path", markdownlintConfigPath);
 
     - if: ${{ inputs.checkout-ref != '' }}
-      uses: hoverkraft-tech/ci-github-common/actions/checkout@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+      uses: hoverkraft-tech/ci-github-common/actions/checkout@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
       with:
         ref: ${{ inputs.checkout-ref }}
 
@@ -160,7 +160,7 @@ runs:
         working-directory: ${{ steps.prepare-variables.outputs.working-directory }}
 
     - name: Setup Node.js
-      uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@df348077afa4e79725151d50606e9dc63f86dcb6 # 0.24.4
+      uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@81a4bca8445b7b273455ff26a9a5c3c31c86b2a1 # 0.25.0
       with:
         working-directory: ${{ github.action_path }}
 
@@ -242,7 +242,7 @@ runs:
             cwd: process.env.WORKING_DIRECTORY,
           });
 
-    - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+    - uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
       if: inputs.github-app-client-id
       id: generate-token
       with:
@@ -251,7 +251,7 @@ runs:
         permission-contents: write
         permission-pull-requests: write
 
-    - uses: hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+    - uses: hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
       id: create-and-merge-pull-request
       with:
         github-token: ${{ steps.generate-token.outputs.token || inputs.github-token }}
diff --git a/actions/helm/release-chart/action.yml b/actions/helm/release-chart/action.yml
index 751b5203..b2a00294 100644
--- a/actions/helm/release-chart/action.yml
+++ b/actions/helm/release-chart/action.yml
@@ -107,7 +107,7 @@ runs:
             throw new Error('Signing charts requires the workflow job to grant id-token: write.');
           }
 
-    - uses: hoverkraft-tech/ci-github-common/actions/checkout@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+    - uses: hoverkraft-tech/ci-github-common/actions/checkout@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
       with:
         ref: ${{ inputs.ref }}
 
@@ -183,7 +183,7 @@ runs:
 
           core.setOutput('values', JSON.stringify([...generatedValues, ...chartValues]));
 
-    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0
+    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0
       with:
         source-path: ${{ github.action_path }}/../..
         destination-directory-name: self-actions-release-chart
@@ -194,7 +194,7 @@ runs:
         values: ${{ steps.chart-tag-updates.outputs.values }}
 
     - name: Setup Node.js
-      uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@df348077afa4e79725151d50606e9dc63f86dcb6 # 0.24.4
+      uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@81a4bca8445b7b273455ff26a9a5c3c31c86b2a1 # 0.25.0
       with:
         working-directory: ${{ github.action_path }}
 
diff --git a/actions/helm/update-chart-values/action.yml b/actions/helm/update-chart-values/action.yml
index 4e77a635..d93b1850 100644
--- a/actions/helm/update-chart-values/action.yml
+++ b/actions/helm/update-chart-values/action.yml
@@ -91,7 +91,7 @@ runs:
           core.setOutput('yq-command', yqCommands.join('\n'));
 
     - if: ${{ steps.chart-values-updates.outputs.yq-command != '' }}
-      uses: mikefarah/yq@c14f446382944492701b16c1ddb48bb9dbe683e3 # v4.53.6
+      uses: mikefarah/yq@504fc38780cc46be8444ea1b72fb55919fc0bfb0 # v4.54.1
       env:
         YQ_COMMAND: ${{ steps.chart-values-updates.outputs.yq-command }}
       with: