diff --git a/.github/workflows/issue-triage.yml b/.github/workflows/issue-triage.yml
index ca1b6937..0a07ad1c 100644
--- a/.github/workflows/issue-triage.yml
+++ b/.github/workflows/issue-triage.yml
@@ -12,5 +12,5 @@ jobs:
       contents: read
       id-token: write
       issues: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/issue-triage.yml@8de63fa646c1b7b778829126cf53b7874074795e
+    uses: aws/aws-durable-execution-ci/.github/workflows/issue-triage.yml@d6b017da14385908951d23e26c790b28a4e5f9f0
     secrets: inherit
diff --git a/.github/workflows/notify.yml b/.github/workflows/notify.yml
index c3ebf17c..c2eb601b 100644
--- a/.github/workflows/notify.yml
+++ b/.github/workflows/notify.yml
@@ -16,7 +16,7 @@ jobs:
       contents: read
       models: read
       id-token: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/notify.yml@8de63fa646c1b7b778829126cf53b7874074795e
+    uses: aws/aws-durable-execution-ci/.github/workflows/notify.yml@d6b017da14385908951d23e26c790b28a4e5f9f0
     secrets:
       BEDROCK_ROLE_ARN: ${{ secrets.BEDROCK_ROLE_ARN }}
       SLACK_WEBHOOK_URL_PR: ${{ secrets.SLACK_WEBHOOK_URL_PR }}
diff --git a/.github/workflows/opentelemetry-conformance-tests.yml b/.github/workflows/opentelemetry-conformance-tests.yml
index 22cda0c7..ef0c825e 100644
--- a/.github/workflows/opentelemetry-conformance-tests.yml
+++ b/.github/workflows/opentelemetry-conformance-tests.yml
@@ -56,7 +56,7 @@ jobs:
       actions: write
       contents: read
       id-token: write
-    uses: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml@c31f95f448a4fe8ffb93203c7920a48e87362801
+    uses: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml@a628f5589bbf067a441696c792ab3023c0d0899b
     with:
       language: python
       resource_prefix: p
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index cdbd2393..a46d01fd 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -75,6 +75,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
+        uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/stale-issue-closer.yml b/.github/workflows/stale-issue-closer.yml
index 945b3192..1c780fc2 100644
--- a/.github/workflows/stale-issue-closer.yml
+++ b/.github/workflows/stale-issue-closer.yml
@@ -14,4 +14,4 @@ jobs:
     permissions:
       contents: read
       issues: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml@1ce65d9d6bf531169718a5e967e15d72fc958265
+    uses: aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml@d6b017da14385908951d23e26c790b28a4e5f9f0