diff --git a/.github/workflows/RASL.yml b/.github/workflows/RASL.yml
index e966f2619..d8c78497c 100644
--- a/.github/workflows/RASL.yml
+++ b/.github/workflows/RASL.yml
@@ -71,16 +71,16 @@ jobs:
       - uses: actions/checkout@v7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.37.9
+        uses: github/codeql-action/init@v4.38.0
         with:
           languages: "javascript,python"
           queries: "security-and-quality"
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v4.37.9
+        uses: github/codeql-action/autobuild@v4.38.0
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4.37.9
+        uses: github/codeql-action/analyze@v4.38.0
         with:
           output: codeql-results
           upload: false  # We handle upload ourselves for RASL processing
diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml
index b3d67d12d..f59443b60 100644
--- a/.github/workflows/codacy.yml
+++ b/.github/workflows/codacy.yml
@@ -56,6 +56,6 @@ jobs:
 
       # Upload the SARIF file generated in the previous step
       - name: Upload SARIF results file
-        uses: github/codeql-action/upload-sarif@v4.37.9
+        uses: github/codeql-action/upload-sarif@v4.38.0
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a0657da78..0fac339df 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -69,7 +69,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4.37.9
+      uses: github/codeql-action/init@v4.38.0
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
@@ -98,6 +98,6 @@ jobs:
         exit 1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4.37.9
+      uses: github/codeql-action/analyze@v4.38.0
       with:
         category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/defender-for-devops.yml b/.github/workflows/defender-for-devops.yml
index 3802e3b8a..05a01b8f9 100644
--- a/.github/workflows/defender-for-devops.yml
+++ b/.github/workflows/defender-for-devops.yml
@@ -46,6 +46,6 @@ jobs:
       uses: microsoft/security-devops-action@v1.12.0
       id: msdo
     - name: Upload results to Security tab
-      uses: github/codeql-action/upload-sarif@v4.37.9
+      uses: github/codeql-action/upload-sarif@v4.38.0
       with:
         sarif_file: ${{ steps.msdo.outputs.sarifFile }}
diff --git a/.github/workflows/njsscan.yml b/.github/workflows/njsscan.yml
index 4fd4143cf..0bb59a98d 100644
--- a/.github/workflows/njsscan.yml
+++ b/.github/workflows/njsscan.yml
@@ -37,6 +37,6 @@ jobs:
       with:
         args: '. --sarif --output results.sarif || true'
     - name: Upload njsscan report
-      uses: github/codeql-action/upload-sarif@v4.37.9
+      uses: github/codeql-action/upload-sarif@v4.38.0
       with:
         sarif_file: results.sarif
diff --git a/.github/workflows/phpmd.yml b/.github/workflows/phpmd.yml
index 6ba95d13b..74de5ff1a 100644
--- a/.github/workflows/phpmd.yml
+++ b/.github/workflows/phpmd.yml
@@ -51,7 +51,7 @@ jobs:
         continue-on-error: true
 
       - name: Upload analysis results to GitHub
-        uses: github/codeql-action/upload-sarif@v4.37.9
+        uses: github/codeql-action/upload-sarif@v4.38.0
         with:
           sarif_file: phpmd-results.sarif
           wait-for-processing: true
diff --git a/.github/workflows/psalm.yml b/.github/workflows/psalm.yml
index 28eee5c4e..27cc740d5 100644
--- a/.github/workflows/psalm.yml
+++ b/.github/workflows/psalm.yml
@@ -36,6 +36,6 @@ jobs:
 
 
       - name: Upload Security Analysis results to GitHub
-        uses: github/codeql-action/upload-sarif@v4.37.9
+        uses: github/codeql-action/upload-sarif@v4.38.0
         with:
           sarif_file: results.sarif