diff --git a/.github/workflows/dast-scan.yml b/.github/workflows/dast-scan.yml
index ba569cb..66b205f 100644
--- a/.github/workflows/dast-scan.yml
+++ b/.github/workflows/dast-scan.yml
@@ -89,7 +89,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Run OWASP ZAP scan
         uses: orangitfi/platform-tooling/.github/actions/owasp-zap-scan@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha
diff --git a/.github/workflows/node-build-and-publish-docker.yml b/.github/workflows/node-build-and-publish-docker.yml
index 70ad232..b35c108 100644
--- a/.github/workflows/node-build-and-publish-docker.yml
+++ b/.github/workflows/node-build-and-publish-docker.yml
@@ -97,7 +97,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Validate publish inputs
         if: ${{ inputs.publish }}
diff --git a/.github/workflows/node-build.yml b/.github/workflows/node-build.yml
index 1bb0434..92d21eb 100644
--- a/.github/workflows/node-build.yml
+++ b/.github/workflows/node-build.yml
@@ -41,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Set up Node.js
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
diff --git a/.github/workflows/node-lint.yml b/.github/workflows/node-lint.yml
index 669f97a..ebaf8dc 100644
--- a/.github/workflows/node-lint.yml
+++ b/.github/workflows/node-lint.yml
@@ -50,7 +50,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Set up Node.js
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
@@ -73,7 +73,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Check for Dockerfile
         id: check
diff --git a/.github/workflows/node-security-scan.yml b/.github/workflows/node-security-scan.yml
index e185b3a..f22e6ca 100644
--- a/.github/workflows/node-security-scan.yml
+++ b/.github/workflows/node-security-scan.yml
@@ -51,7 +51,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
 
@@ -65,7 +65,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Run npm audit
         uses: orangitfi/platform-tooling/.github/actions/npm-audit@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha
@@ -79,7 +79,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Run guarddog npm scan
         uses: orangitfi/platform-tooling/.github/actions/guarddog-npm-scan@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha
diff --git a/.github/workflows/node-test.yml b/.github/workflows/node-test.yml
index 385e416..12fa299 100644
--- a/.github/workflows/node-test.yml
+++ b/.github/workflows/node-test.yml
@@ -75,7 +75,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Set up Node.js
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
@@ -99,7 +99,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Set up Node.js
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
diff --git a/.github/workflows/node-update-visual-snapshots.yml b/.github/workflows/node-update-visual-snapshots.yml
index 0cf567e..d2b5ed6 100644
--- a/.github/workflows/node-update-visual-snapshots.yml
+++ b/.github/workflows/node-update-visual-snapshots.yml
@@ -102,7 +102,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           # Honour the optional branch input; fall back to the triggering ref.
           # persist-credentials is true by default — required for the git push below.
diff --git a/.github/workflows/node-vulnerability-scan.yml b/.github/workflows/node-vulnerability-scan.yml
index aa1e811..e17668d 100644
--- a/.github/workflows/node-vulnerability-scan.yml
+++ b/.github/workflows/node-vulnerability-scan.yml
@@ -70,7 +70,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Install Syft and Grype
         uses: orangitfi/platform-tooling/.github/actions/scheduled_test_setup@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha
@@ -87,7 +87,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Scan Docker image
         uses: orangitfi/platform-tooling/.github/actions/docker-scan@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha
diff --git a/.github/workflows/php-lint.yml b/.github/workflows/php-lint.yml
index e10c3a6..afa4efe 100644
--- a/.github/workflows/php-lint.yml
+++ b/.github/workflows/php-lint.yml
@@ -73,7 +73,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Install dependencies
         shell: bash
@@ -107,7 +107,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Install dependencies
         shell: bash
@@ -140,7 +140,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Check for Dockerfile
         id: check
diff --git a/.github/workflows/php-security-scan.yml b/.github/workflows/php-security-scan.yml
index 3101953..e52bc8d 100644
--- a/.github/workflows/php-security-scan.yml
+++ b/.github/workflows/php-security-scan.yml
@@ -56,7 +56,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
 
@@ -70,7 +70,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Run composer audit
         uses: orangitfi/platform-tooling/.github/actions/composer-audit@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha
@@ -84,7 +84,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Run guarddog Packagist scan
         uses: orangitfi/platform-tooling/.github/actions/guarddog-php-scan@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha
diff --git a/.github/workflows/php-test.yml b/.github/workflows/php-test.yml
index e328b6a..4eac7a7 100644
--- a/.github/workflows/php-test.yml
+++ b/.github/workflows/php-test.yml
@@ -50,7 +50,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Install dependencies
         shell: bash
diff --git a/.github/workflows/php-vulnerability-scan.yml b/.github/workflows/php-vulnerability-scan.yml
index 9720f2a..2449956 100644
--- a/.github/workflows/php-vulnerability-scan.yml
+++ b/.github/workflows/php-vulnerability-scan.yml
@@ -72,7 +72,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Install Syft and Grype
         uses: orangitfi/platform-tooling/.github/actions/scheduled_test_setup@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha
@@ -89,7 +89,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Scan Docker image
         uses: orangitfi/platform-tooling/.github/actions/docker-scan@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha
diff --git a/.github/workflows/pr-ci.yml b/.github/workflows/pr-ci.yml
index 8684fb4..abc498c 100644
--- a/.github/workflows/pr-ci.yml
+++ b/.github/workflows/pr-ci.yml
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Install actionlint
         env:
@@ -90,7 +90,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/python-build-and-publish-docker.yml b/.github/workflows/python-build-and-publish-docker.yml
index f88a52b..561a812 100644
--- a/.github/workflows/python-build-and-publish-docker.yml
+++ b/.github/workflows/python-build-and-publish-docker.yml
@@ -97,7 +97,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Validate publish inputs
         if: ${{ inputs.publish }}
diff --git a/.github/workflows/python-lint.yml b/.github/workflows/python-lint.yml
index 3be70bf..aa38377 100644
--- a/.github/workflows/python-lint.yml
+++ b/.github/workflows/python-lint.yml
@@ -52,7 +52,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Install uv
         uses: orangitfi/platform-tooling/.github/actions/setup-uv@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha
@@ -74,7 +74,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Check for Dockerfile
         id: check
diff --git a/.github/workflows/python-security-scan.yml b/.github/workflows/python-security-scan.yml
index a008fa6..b335ea7 100644
--- a/.github/workflows/python-security-scan.yml
+++ b/.github/workflows/python-security-scan.yml
@@ -45,7 +45,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
 
@@ -59,7 +59,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Install uv
         uses: orangitfi/platform-tooling/.github/actions/setup-uv@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha
@@ -75,7 +75,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Install uv
         uses: orangitfi/platform-tooling/.github/actions/setup-uv@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha
diff --git a/.github/workflows/python-test.yml b/.github/workflows/python-test.yml
index b2cdad6..ca5ee0b 100644
--- a/.github/workflows/python-test.yml
+++ b/.github/workflows/python-test.yml
@@ -51,7 +51,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Install uv
         uses: orangitfi/platform-tooling/.github/actions/setup-uv@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha
diff --git a/.github/workflows/python-vulnerability-scan.yml b/.github/workflows/python-vulnerability-scan.yml
index 29d55e7..48e31c2 100644
--- a/.github/workflows/python-vulnerability-scan.yml
+++ b/.github/workflows/python-vulnerability-scan.yml
@@ -70,7 +70,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Install Syft and Grype
         uses: orangitfi/platform-tooling/.github/actions/scheduled_test_setup@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha
@@ -87,7 +87,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Scan Docker image
         uses: orangitfi/platform-tooling/.github/actions/docker-scan@f877740fc9a519be6b06492ffd69017337b8ca86 # pt-sha