diff --git a/.github/workflows/dest_bigquery.yml b/.github/workflows/dest_bigquery.yml
index 2cfe803afc657c..c19c0bf2be7d9a 100644
--- a/.github/workflows/dest_bigquery.yml
+++ b/.github/workflows/dest_bigquery.yml
@@ -38,7 +38,7 @@ jobs:
           workload_identity_provider: 'projects/151868820337/locations/global/workloadIdentityPools/integration-test-pool/providers/integration-test-provider'
           service_account: 'integration-service-account@cq-integration-tests.iam.gserviceaccount.com'
       - name: Set up Cloud SDK
-        uses: 'google-github-actions/setup-gcloud@v0.6.2'
+        uses: 'google-github-actions/setup-gcloud@v0.7.0'
       - name: Set up Go 1.x
         uses: actions/setup-go@v4
         with:
diff --git a/.github/workflows/dest_file.yml b/.github/workflows/dest_file.yml
index 2e704bf5286c88..c0aa8cb6db6659 100644
--- a/.github/workflows/dest_file.yml
+++ b/.github/workflows/dest_file.yml
@@ -37,7 +37,7 @@ jobs:
           cache: true
           cache-dependency-path: plugins/destination/file/go.sum
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v3.6.0
+        uses: golangci/golangci-lint-action@v3.7.0
         with:
           version: v1.55.2
           working-directory: plugins/destination/file
diff --git a/.github/workflows/dest_gremlin.yml b/.github/workflows/dest_gremlin.yml
index 12b5e4f50af2c9..660f5e29ef20a8 100644
--- a/.github/workflows/dest_gremlin.yml
+++ b/.github/workflows/dest_gremlin.yml
@@ -26,7 +26,7 @@ jobs:
         working-directory: ./plugins/destination/gremlin
     services:
       gremlin-server:
-        image: tinkerpop/gremlin-server:3.6.4
+        image: tinkerpop/gremlin-server:3.7.1
         ports:
           - 8182:8182
     steps:
diff --git a/.github/workflows/dest_meilisearch.yml b/.github/workflows/dest_meilisearch.yml
index 02aa325f243ae8..1a842e67e7a1d1 100644
--- a/.github/workflows/dest_meilisearch.yml
+++ b/.github/workflows/dest_meilisearch.yml
@@ -28,7 +28,7 @@ jobs:
         working-directory: plugins/destination/meilisearch
     services:
       meilisearch:
-        image:   getmeili/meilisearch:v1.3.0
+        image:   getmeili/meilisearch:v1.5.1
         env:
           MEILI_ENV:          development
           MEILI_MASTER_KEY:   ${{ env.MEILI_MASTER_KEY }}
diff --git a/.github/workflows/docs_changes_summary.yml b/.github/workflows/docs_changes_summary.yml
index 68fd4b1e33e2b6..6a7b74ec5f248f 100644
--- a/.github/workflows/docs_changes_summary.yml
+++ b/.github/workflows/docs_changes_summary.yml
@@ -55,7 +55,7 @@ jobs:
             }).join('\n')
             return changesList
       - name: Find Comment
-        uses: peter-evans/find-comment@5cea877144f86ac1aacfe5240ff2390f7135b563
+        uses: peter-evans/find-comment@4541d1b6b0e618acc24284e118743fc5ad0bc5de
         id: find-comment
         with:
           token: ${{ secrets.GH_CQ_BOT }}
@@ -63,7 +63,7 @@ jobs:
           comment-author: "cq-bot"
           body-includes: "### This PR has the following changes to source plugin(s) tables:"
       - name: Create or update comment
-        uses: peter-evans/create-or-update-comment@716151b9579b05352dbf244d48e968d211889bbc
+        uses: peter-evans/create-or-update-comment@0f44b017d10caeea6a4c1b410ba0521ad8a02815
         if: steps.get-changes.outputs.result != ''
         with:
           token: ${{ secrets.GH_CQ_BOT }}
diff --git a/.github/workflows/lint_markdown.yml b/.github/workflows/lint_markdown.yml
index 3d686b4d61afa7..7256c166d42a5e 100644
--- a/.github/workflows/lint_markdown.yml
+++ b/.github/workflows/lint_markdown.yml
@@ -15,7 +15,7 @@ jobs:
       - name: Git checkout
         uses: actions/checkout@v4
       - name: Vale
-        uses: errata-ai/vale-action@1edf87ba97278a700ba88ed9619172912ffaac25
+        uses: errata-ai/vale-action@c99f2dfd2aeaedb3d4bb16f385841830b9164d31
         with:
           vale_flags: "--glob=!{website/pages/blog/podcast-software-engineer-daily.md,**/CHANGELOG.md,**/docs/tables/README.md,plugins/source/test/docs/tables/*.md,.github/styles/proselint/README.md,**/v1-migration.md,website/pages/docs/plugins/sources/*/tables.md,plugins/source/*/docs/policies.md,**/tables/**/*,website/pages/case-studies/*.mdx,cli/internal/docs/testdata/*.md}"
           filter_mode: nofilter
diff --git a/.github/workflows/missing_tables_summary.yml b/.github/workflows/missing_tables_summary.yml
index 684049365f3a09..9c29fecdddde1d 100644
--- a/.github/workflows/missing_tables_summary.yml
+++ b/.github/workflows/missing_tables_summary.yml
@@ -37,14 +37,14 @@ jobs:
           echo "$missing_tables" >> $GITHUB_OUTPUT
           echo "EOF" >> $GITHUB_OUTPUT
       - name: Find Comment
-        uses: peter-evans/find-comment@5cea877144f86ac1aacfe5240ff2390f7135b563
+        uses: peter-evans/find-comment@4541d1b6b0e618acc24284e118743fc5ad0bc5de
         id: find-comment
         with:
           issue-number: ${{ github.event.pull_request.number }}
           comment-author: 'github-actions[bot]'
           body-includes: '### This PR has missing tables'
       - name: Create or update comment
-        uses: peter-evans/create-or-update-comment@716151b9579b05352dbf244d48e968d211889bbc
+        uses: peter-evans/create-or-update-comment@0f44b017d10caeea6a4c1b410ba0521ad8a02815
         if: steps.missing-tables.outputs.result != ''
         with:
           comment-id: ${{ steps.find-comment.outputs.comment-id }}
diff --git a/.github/workflows/publish_plugin_to_hub.yml b/.github/workflows/publish_plugin_to_hub.yml
index 7c8e4b77a6e903..f35118c4c12dff 100644
--- a/.github/workflows/publish_plugin_to_hub.yml
+++ b/.github/workflows/publish_plugin_to_hub.yml
@@ -112,7 +112,7 @@ jobs:
             return shellescape([data.body]);
 
       - name: Find and Replace
-        uses: jacobtomlinson/gha-find-replace@a51bbcd94d000df9ca0fcb54ec8be69aad8374b0
+        uses: jacobtomlinson/gha-find-replace@3a8ed858a4e3fb487c6f53658ec40b2b1d45d9d8
         with:
           find: "(?i)version_${{ needs.prepare.outputs.plugin_kind }}_${{ needs.prepare.outputs.plugin_name }}"
           replace: ${{ needs.prepare.outputs.plugin_version }}
diff --git a/.github/workflows/publish_plugin_to_hub_duckdb.yml b/.github/workflows/publish_plugin_to_hub_duckdb.yml
index 26396659b4f533..b2615f6d0b4858 100644
--- a/.github/workflows/publish_plugin_to_hub_duckdb.yml
+++ b/.github/workflows/publish_plugin_to_hub_duckdb.yml
@@ -94,7 +94,7 @@ jobs:
             return shellescape([data.body]);
 
       - name: Find and Replace
-        uses: jacobtomlinson/gha-find-replace@a51bbcd94d000df9ca0fcb54ec8be69aad8374b0
+        uses: jacobtomlinson/gha-find-replace@3a8ed858a4e3fb487c6f53658ec40b2b1d45d9d8
         with:
           find: "(?i)version_${{ needs.prepare.outputs.plugin_kind }}_${{ needs.prepare.outputs.plugin_name }}"
           replace: ${{ needs.prepare.outputs.plugin_version }}
diff --git a/.github/workflows/publish_plugin_to_hub_snowflake.yml b/.github/workflows/publish_plugin_to_hub_snowflake.yml
index 258a6b32b5c674..c664c9278a5aeb 100644
--- a/.github/workflows/publish_plugin_to_hub_snowflake.yml
+++ b/.github/workflows/publish_plugin_to_hub_snowflake.yml
@@ -95,7 +95,7 @@ jobs:
             return shellescape([data.body]);
 
       - name: Find and Replace
-        uses: jacobtomlinson/gha-find-replace@a51bbcd94d000df9ca0fcb54ec8be69aad8374b0
+        uses: jacobtomlinson/gha-find-replace@3a8ed858a4e3fb487c6f53658ec40b2b1d45d9d8
         with:
           find: "(?i)version_${{ needs.prepare.outputs.plugin_kind }}_${{ needs.prepare.outputs.plugin_name }}"
           replace: ${{ needs.prepare.outputs.plugin_version }}
diff --git a/.github/workflows/publish_plugin_to_hub_sqlite.yml b/.github/workflows/publish_plugin_to_hub_sqlite.yml
index 0db8ab4eb87435..6686d3102302f9 100644
--- a/.github/workflows/publish_plugin_to_hub_sqlite.yml
+++ b/.github/workflows/publish_plugin_to_hub_sqlite.yml
@@ -94,7 +94,7 @@ jobs:
             return shellescape([data.body]);
 
       - name: Find and Replace
-        uses: jacobtomlinson/gha-find-replace@a51bbcd94d000df9ca0fcb54ec8be69aad8374b0
+        uses: jacobtomlinson/gha-find-replace@3a8ed858a4e3fb487c6f53658ec40b2b1d45d9d8
         with:
           find: "(?i)version_${{ needs.prepare.outputs.plugin_kind }}_${{ needs.prepare.outputs.plugin_name }}"
           replace: ${{ needs.prepare.outputs.plugin_version }}
diff --git a/.github/workflows/release_all.yml b/.github/workflows/release_all.yml
index b4c1e603fec09c..6d307b4aa9bdb7 100644
--- a/.github/workflows/release_all.yml
+++ b/.github/workflows/release_all.yml
@@ -10,7 +10,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Add token to config.yaml
-        uses: jacobtomlinson/gha-find-replace@208a50093270b081bc1a0a4d3d1dd75d462a0eac
+        uses: jacobtomlinson/gha-find-replace@3a8ed858a4e3fb487c6f53658ec40b2b1d45d9d8
         with:
           find: GITHUB_TOKEN_VALUE
           replace: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release_plugin.yml b/.github/workflows/release_plugin.yml
index c01d97cb12cbcf..34830ed526c192 100644
--- a/.github/workflows/release_plugin.yml
+++ b/.github/workflows/release_plugin.yml
@@ -69,23 +69,23 @@ jobs:
       REGISTRY: ghcr.io
     steps:
       - name: Log in to the Container registry
-        uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
+        uses: docker/login-action@3d58c274f17dffee475a5520cbe67f0a882c4dbb
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@4c0219f9ac95b02789c1075625400b2acbff50b1
+        uses: docker/setup-buildx-action@edfb0fe6204400c56fbfd3feba3fe9ad1adfa345
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
+        uses: docker/metadata-action@9dc751fe249ad99385a2583ee0d084c400eee04e
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME_PREFIX }}/cq-${{ needs.prepare.outputs.plugin_type }}-${{ needs.prepare.outputs.plugin_name }}
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@f2a1d5e99d037542a71f64918e516c093c6f3fc4
+        uses: docker/build-push-action@9f6f8c940b91232557f8699b21341a08624a8dce
         env:
           BUILDX_NO_DEFAULT_ATTESTATIONS: 1
         with:
diff --git a/.github/workflows/source_bitbucket.yml b/.github/workflows/source_bitbucket.yml
index 94ff6d1c3db712..229e169075e960 100644
--- a/.github/workflows/source_bitbucket.yml
+++ b/.github/workflows/source_bitbucket.yml
@@ -34,7 +34,7 @@ jobs:
           java-version: "20"
           cache: "gradle"
       - name: Validate Gradle wrapper
-        uses: gradle/wrapper-validation-action@56b90f209b02bf6d1deae490e9ef18b21a389cd4
+        uses: gradle/wrapper-validation-action@342dbebe7272035434f9baccc29a816ec6dd2c7b
       - name: Build package
         run: ./gradlew build
         env:
@@ -54,10 +54,10 @@ jobs:
       REGISTRY: ghcr.io
     steps:
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@4c0219f9ac95b02789c1075625400b2acbff50b1
+        uses: docker/setup-buildx-action@edfb0fe6204400c56fbfd3feba3fe9ad1adfa345
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@f2a1d5e99d037542a71f64918e516c093c6f3fc4
+        uses: docker/build-push-action@9f6f8c940b91232557f8699b21341a08624a8dce
         with:
           context: "{{defaultContext}}:plugins/source/bitbucket"
           load: true