diff --git a/.github/workflows/_repository-checks.yml b/.github/workflows/_repository-checks.yml
index ba002db..c4d02cc 100644
--- a/.github/workflows/_repository-checks.yml
+++ b/.github/workflows/_repository-checks.yml
@@ -33,7 +33,7 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
+        uses: zizmorcore/zizmor-action@6599ee8b7a49aef6a770f63d261d214911a7ce02 # v0.6.0
         with:
           persona: auditor
           min-severity: medium
@@ -50,7 +50,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Node
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 24
           cache: npm
@@ -71,7 +71,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Node
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 24
           cache: npm
@@ -162,7 +162,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Node
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 24
           cache: npm
diff --git a/.github/workflows/assets-build.yml b/.github/workflows/assets-build.yml
index 3cd0be8..6a8b47a 100644
--- a/.github/workflows/assets-build.yml
+++ b/.github/workflows/assets-build.yml
@@ -217,14 +217,14 @@ jobs:
 
       - name: Set up Node
         if: ${{ steps.detect.outputs.has_package_json == 'true' && inputs.run_node_build && steps.package-manager.outputs.cache == '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           registry-url: ${{ inputs.npm_registry_domain }}
 
       - name: Set up Node with cache
         if: ${{ steps.detect.outputs.has_package_json == 'true' && inputs.run_node_build && steps.package-manager.outputs.cache != '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           registry-url: ${{ inputs.npm_registry_domain }}
diff --git a/.github/workflows/automatic-release.yml b/.github/workflows/automatic-release.yml
index 242efad..57a8946 100644
--- a/.github/workflows/automatic-release.yml
+++ b/.github/workflows/automatic-release.yml
@@ -156,7 +156,7 @@ jobs:
           rm -rf .workflow-templates
 
       - name: Set up Node
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_REGISTRY_TOKEN }}
         with:
diff --git a/.github/workflows/build-and-distribute.yml b/.github/workflows/build-and-distribute.yml
index 7190ab4..f0d387b 100644
--- a/.github/workflows/build-and-distribute.yml
+++ b/.github/workflows/build-and-distribute.yml
@@ -468,14 +468,14 @@ jobs:
 
       - name: Set up Node
         if: ${{ steps.existing-build.outputs.exists != 'true' && steps.detect.outputs.has_package_json == 'true' && steps.package-manager.outputs.cache == '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           registry-url: ${{ inputs.npm_registry_domain }}
 
       - name: Set up Node with cache
         if: ${{ steps.existing-build.outputs.exists != 'true' && steps.detect.outputs.has_package_json == 'true' && steps.package-manager.outputs.cache != '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           registry-url: ${{ inputs.npm_registry_domain }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index cf92757..ae08174 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -37,10 +37,10 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
+        uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
         with:
           languages: ${{ inputs.languages }}
           build-mode: ${{ inputs.build_mode }}
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
+        uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
diff --git a/.github/workflows/deploy-deployer.yml b/.github/workflows/deploy-deployer.yml
index e8e10dd..e2a6c84 100644
--- a/.github/workflows/deploy-deployer.yml
+++ b/.github/workflows/deploy-deployer.yml
@@ -225,14 +225,14 @@ jobs:
 
       - name: Set up Node
         if: ${{ steps.node.outputs.enabled == 'true' && steps.package-manager.outputs.cache == '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           registry-url: ${{ inputs.npm_registry_domain }}
 
       - name: Set up Node with cache
         if: ${{ steps.node.outputs.enabled == 'true' && steps.package-manager.outputs.cache != '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           registry-url: ${{ inputs.npm_registry_domain }}
diff --git a/.github/workflows/javascript-static-analysis.yml b/.github/workflows/javascript-static-analysis.yml
index e5058c4..2237b5f 100644
--- a/.github/workflows/javascript-static-analysis.yml
+++ b/.github/workflows/javascript-static-analysis.yml
@@ -171,14 +171,14 @@ jobs:
 
       - name: Set up Node
         if: ${{ steps.package-manager.outputs.cache == '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           registry-url: ${{ inputs.npm_registry_domain }}
 
       - name: Set up Node with cache
         if: ${{ steps.package-manager.outputs.cache != '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           registry-url: ${{ inputs.npm_registry_domain }}
diff --git a/.github/workflows/javascript-unit.yml b/.github/workflows/javascript-unit.yml
index ccd0c08..6219380 100644
--- a/.github/workflows/javascript-unit.yml
+++ b/.github/workflows/javascript-unit.yml
@@ -200,14 +200,14 @@ jobs:
 
       - name: Set up Node
         if: ${{ steps.package-manager.outputs.cache == '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           registry-url: ${{ inputs.npm_registry_domain }}
 
       - name: Set up Node with cache
         if: ${{ steps.package-manager.outputs.cache != '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           registry-url: ${{ inputs.npm_registry_domain }}
diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml
index 0e72b1b..b64c871 100644
--- a/.github/workflows/playwright.yml
+++ b/.github/workflows/playwright.yml
@@ -213,7 +213,7 @@ jobs:
 
       - name: Set up Node
         if: ${{ steps.package-manager.outputs.cache == '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_REGISTRY_TOKEN }}
         with:
@@ -222,7 +222,7 @@ jobs:
 
       - name: Set up Node with cache
         if: ${{ steps.package-manager.outputs.cache != '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_REGISTRY_TOKEN }}
         with:
diff --git a/.github/workflows/sympress-qa.yml b/.github/workflows/sympress-qa.yml
index a6e8768..6c64687 100644
--- a/.github/workflows/sympress-qa.yml
+++ b/.github/workflows/sympress-qa.yml
@@ -237,13 +237,13 @@ jobs:
 
       - name: Set up Node
         if: ${{ matrix.target != '__no_targets__' && inputs.run_node_build && steps.package-manager.outputs.cache == '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
 
       - name: Set up Node with cache
         if: ${{ matrix.target != '__no_targets__' && inputs.run_node_build && steps.package-manager.outputs.cache != '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           cache: ${{ steps.package-manager.outputs.cache }}
diff --git a/.github/workflows/wordpress-archive.yml b/.github/workflows/wordpress-archive.yml
index 2ac7af3..0ec56a7 100644
--- a/.github/workflows/wordpress-archive.yml
+++ b/.github/workflows/wordpress-archive.yml
@@ -243,14 +243,14 @@ jobs:
 
       - name: Set up Node
         if: ${{ steps.detect.outputs.has_package_json == 'true' && inputs.run_node_build && steps.package-manager.outputs.cache == '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           registry-url: ${{ inputs.npm_registry_domain }}
 
       - name: Set up Node with cache
         if: ${{ steps.detect.outputs.has_package_json == 'true' && inputs.run_node_build && steps.package-manager.outputs.cache != '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           registry-url: ${{ inputs.npm_registry_domain }}
diff --git a/.github/workflows/wp-scripts-lint.yml b/.github/workflows/wp-scripts-lint.yml
index 3dd5ce7..ce9cf3d 100644
--- a/.github/workflows/wp-scripts-lint.yml
+++ b/.github/workflows/wp-scripts-lint.yml
@@ -181,14 +181,14 @@ jobs:
 
       - name: Set up Node
         if: ${{ steps.package-manager.outputs.cache == '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           registry-url: ${{ inputs.npm_registry_domain }}
 
       - name: Set up Node with cache
         if: ${{ steps.package-manager.outputs.cache != '' }}
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node_version }}
           registry-url: ${{ inputs.npm_registry_domain }}