diff --git a/.github/workflows/coverage-history.yml b/.github/workflows/coverage-history.yml
index 63cdefbf..b956dd65 100644
--- a/.github/workflows/coverage-history.yml
+++ b/.github/workflows/coverage-history.yml
@@ -78,7 +78,7 @@ jobs:
           distribution: 'temurin'
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
       - name: Resolve commit metadata
         id: meta
diff --git a/.github/workflows/demo-smoke-test.yml b/.github/workflows/demo-smoke-test.yml
index 24b0bc86..5d3f8d78 100644
--- a/.github/workflows/demo-smoke-test.yml
+++ b/.github/workflows/demo-smoke-test.yml
@@ -60,7 +60,7 @@ jobs:
 
     - name: Setup Gradle
       if: steps.key.outputs.available == 'true'
-      uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
     - name: Enable KVM
       if: steps.key.outputs.available == 'true'
@@ -91,7 +91,7 @@ jobs:
 
     - name: Upload test reports
       if: always() && steps.key.outputs.available == 'true'
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: demo-smoke-test-reports
         path: |
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 1bda1b5c..89d67335 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -41,7 +41,7 @@ jobs:
         distribution: 'temurin'
 
     - name: Setup Gradle
-      uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
     # Run dokka and create tar
     - name: Generate documentation
diff --git a/.github/workflows/instrumentation-test.yml b/.github/workflows/instrumentation-test.yml
index 3aefa7be..54669d99 100644
--- a/.github/workflows/instrumentation-test.yml
+++ b/.github/workflows/instrumentation-test.yml
@@ -39,7 +39,7 @@ jobs:
         distribution: 'temurin'
 
     - name: Setup Gradle
-      uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
     - name: Inject Maps API Key
       env:
@@ -83,7 +83,7 @@ jobs:
 
     - name: Upload coverage reports
       if: always()
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: instrumentation-coverage
         path: instrumentation-coverage
@@ -118,7 +118,7 @@ jobs:
 
     - name: Upload test reports
       if: always()
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: test-reports
         path: ./maps-app/build/reports
diff --git a/.github/workflows/lint-report.yml b/.github/workflows/lint-report.yml
index 82a2626b..113c7afc 100644
--- a/.github/workflows/lint-report.yml
+++ b/.github/workflows/lint-report.yml
@@ -38,7 +38,7 @@ jobs:
           java-version: '21'
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
       - name: Check formatting
         run: ./gradlew spotlessCheck
@@ -47,25 +47,25 @@ jobs:
         run: ./gradlew lint
 
       - name: Upload SARIF from maps-compose
-        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+        uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
         with:
           sarif_file: maps-compose/build/reports/lint-results.sarif
           category: maps-compose
 
       - name: Upload SARIF from maps-compose-utils
-        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+        uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
         with:
           sarif_file: maps-compose-utils/build/reports/lint-results.sarif
           category: maps-compose-utils
 
       - name: Upload SARIF from maps-compose-widgets
-        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+        uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
         with:
           sarif_file: maps-compose-widgets/build/reports/lint-results.sarif
           category: maps-compose-widgets
 
       - name: Upload SARIF from maps-app
-        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+        uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
         with:
           sarif_file: maps-app/build/reports/lint-results.sarif
           category: maps-app
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index ffeb5873..e1169b66 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -37,7 +37,7 @@ jobs:
           distribution: 'temurin'
           
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
           
       - name: Create .gpg key
         run: |
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index fd73fac6..7faafb6c 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -45,7 +45,7 @@ jobs:
         distribution: 'temurin'
 
     - name: Setup Gradle
-      uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
     - name: Build modules
       run: ./gradlew build koverXmlReportDebug -x :maps-app:generateDebugScreenshotTestConfig -x :maps-app:generateReleaseScreenshotTestConfig --stacktrace
@@ -92,7 +92,7 @@ jobs:
         fi
 
     - name: Upload build reports
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       if: always()
       with:
         name: screenshot-report