diff --git a/.github/workflows/submitBeta.yml b/.github/workflows/submitBeta.yml
index 9afe20e34b..7c429e987f 100644
--- a/.github/workflows/submitBeta.yml
+++ b/.github/workflows/submitBeta.yml
@@ -67,7 +67,7 @@ jobs:
           rm -rf ./extension/build/images
           mv ./extension/build/beta_images ./extension/build/images
       - name: Remove scripts tag
-        uses: restackio/update-json-file-action@1e34d747ca044df80b37bc4ef5a9aa41be9dac8f #v2.1
+        uses: restackio/update-json-file-action@f8ef1561cb15ba86a6367b547216375bc60e7f91 #v2.1
         with:
           file: ./extension/build/manifest.json
           fields: '{"background": {"service_worker": "background.min.js"}}'
@@ -109,7 +109,7 @@ jobs:
           publish: true
           publish-target: trustedTesters
       - name: Slack Notification
-        uses: rtCamp/action-slack-notify@4e5fb42d249be6a45a298f3c9543b111b02f7907 #v2.3.0
+        uses: rtCamp/action-slack-notify@c33737706dea87cd7784c687dadc9adf1be59990 #v2.3.2
         env:
           MSG_MINIMAL: true
           SLACK_CHANNEL: team-wallet-eng
diff --git a/.github/workflows/submitProduction.yml b/.github/workflows/submitProduction.yml
index a8b82753f0..41c6300587 100644
--- a/.github/workflows/submitProduction.yml
+++ b/.github/workflows/submitProduction.yml
@@ -86,7 +86,7 @@ jobs:
           apiSecret: ${{ secrets.AMO_SIGN_SECRET }}
           timeout: 900000
       - name: Remove scripts tag
-        uses: restackio/update-json-file-action@1e34d747ca044df80b37bc4ef5a9aa41be9dac8f #v2.1
+        uses: restackio/update-json-file-action@f8ef1561cb15ba86a6367b547216375bc60e7f91 #v2.1
         with:
           file: ./extension/build/manifest.json
           fields: '{"background": {"service_worker": "background.min.js"}}'
@@ -120,7 +120,7 @@ jobs:
           asset_name: build-${{ github.event.inputs.version }}.zip
           asset_content_type: application/zip
       - name: Slack Notification
-        uses: rtCamp/action-slack-notify@4e5fb42d249be6a45a298f3c9543b111b02f7907 #v2.3.0
+        uses: rtCamp/action-slack-notify@c33737706dea87cd7784c687dadc9adf1be59990 #v2.3.2
         env:
           MSG_MINIMAL: true
           SLACK_CHANNEL: release
diff --git a/.github/workflows/submitSafari.yml b/.github/workflows/submitSafari.yml
index 6be00c09f6..803604633f 100644
--- a/.github/workflows/submitSafari.yml
+++ b/.github/workflows/submitSafari.yml
@@ -15,53 +15,53 @@ jobs:
     steps:
       - uses: maxim-lobanov/setup-xcode@v1
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Update package.json version
-        uses: jossef/action-set-json-field@6e6d7e639f24b3955ef682815317b5613ac6ca12 #v1
+        uses: jossef/action-set-json-field@2a0f7d953b580b828717daf4de7fafc7e4135e97 #v2
         with:
           file: ./extension/package.json
           field: version
           value: ${{ github.event.inputs.version }}
       - name: Update manifest-v2.json version_name
-        uses: jossef/action-set-json-field@6e6d7e639f24b3955ef682815317b5613ac6ca12 #v1
+        uses: jossef/action-set-json-field@2a0f7d953b580b828717daf4de7fafc7e4135e97 #v2
         with:
           file: ./extension/public/static/manifest/v2.json
           field: version_name
           value: ${{ github.event.inputs.version }}
       - name: Update manifest-v3.json version_name
-        uses: jossef/action-set-json-field@6e6d7e639f24b3955ef682815317b5613ac6ca12 #v1
+        uses: jossef/action-set-json-field@2a0f7d953b580b828717daf4de7fafc7e4135e97 #v2
         with:
           file: ./extension/public/static/manifest/v3.json
           field: version_name
           value: ${{ github.event.inputs.version }}
       - name: Get manifest.json version
         id: manifest_version
-        uses: frabert/replace-string-action@4ec615c8a75164a61d8fb333ad5e2e86ff038af1 #v1.2
+        uses: frabert/replace-string-action@b6828c5a4cb6371753ff873b0d1c4c4fbd9a63cb #v2.5
         with:
           string: ${{ github.event.inputs.version }}
           pattern: \-(.*)
           replace-with: ""
       - name: Update manifest-v2.json version
-        uses: jossef/action-set-json-field@6e6d7e639f24b3955ef682815317b5613ac6ca12 #v1
+        uses: jossef/action-set-json-field@2a0f7d953b580b828717daf4de7fafc7e4135e97 #v2
         with:
           file: ./extension/public/static/manifest/v2.json
           field: version
           value: ${{ steps.manifest_version.outputs.replaced }}
       - name: Update manifest-v3.json version
-        uses: jossef/action-set-json-field@6e6d7e639f24b3955ef682815317b5613ac6ca12 #v1
+        uses: jossef/action-set-json-field@2a0f7d953b580b828717daf4de7fafc7e4135e97 #v2
         with:
           file: ./extension/public/static/manifest/v3.json
           field: version
           value: ${{ steps.manifest_version.outputs.replaced }}
       - name: Build extension
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v4
         with:
           node-version: "21"
       - run: yarn setup && yarn build:freighter-api && yarn build:extension:production --env AMPLITUDE_KEY="${{ secrets.AMPLITUDE_KEY }}" SENTRY_KEY="${{ secrets.SENTRY_KEY }}"
       - name: Convert extension to Xcode project
         run: xcrun safari-web-extension-converter ./extension/build --project-location $GYM_PROJECT --macos-only
       - name: Set up ruby env
-        uses: ruby/setup-ruby@v1.138.0
+        uses: ruby/setup-ruby@v1.202.0
         with:
           ruby-version: 2.6.10
           bundler-cache: true