diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index 397a94f..1966370 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -22,7 +22,7 @@ jobs:
       - name: Generate app token
         id: app-token
         if: steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor'
-        uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
           app-id: ${{ secrets.DEPENDABOT_AUTOMERGE_APP_ID }}
           private-key: ${{ secrets.DEPENDABOT_AUTOMERGE_PRIVATE_KEY }}
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 3ccaf2b..cac9c58 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -37,12 +37,12 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Python
-        uses: actions/setup-python@v6.3.0
+        uses: actions/setup-python@v7.0.0
         with:
           python-version-file: pyproject.toml
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.3.2
+        uses: astral-sh/setup-uv@v9.0.0
         with:
           enable-cache: true
 
diff --git a/.github/workflows/pr-build.yaml b/.github/workflows/pr-build.yaml
index 728de3b..ff91e7f 100644
--- a/.github/workflows/pr-build.yaml
+++ b/.github/workflows/pr-build.yaml
@@ -7,7 +7,7 @@ on:
 permissions: write-all
 jobs:
   build:
-    uses: LayeredCraft/devops-templates/.github/workflows/pr-build.yaml@v10.1
+    uses: LayeredCraft/devops-templates/.github/workflows/pr-build.yaml@v10.3
     with:
       solution: LayeredCraft.Cdk.Constructs.slnx
       hasTests: true
diff --git a/.github/workflows/pr-title-check.yaml b/.github/workflows/pr-title-check.yaml
index 6180520..21c5841 100644
--- a/.github/workflows/pr-title-check.yaml
+++ b/.github/workflows/pr-title-check.yaml
@@ -10,4 +10,4 @@ permissions:
 
 jobs:
   validate:
-    uses: LayeredCraft/devops-templates/.github/workflows/pr-title-check.yml@v10.1
\ No newline at end of file
+    uses: LayeredCraft/devops-templates/.github/workflows/pr-title-check.yml@v10.3
\ No newline at end of file
diff --git a/.github/workflows/publish-preview.yaml b/.github/workflows/publish-preview.yaml
index 1a8786b..d7cc61c 100644
--- a/.github/workflows/publish-preview.yaml
+++ b/.github/workflows/publish-preview.yaml
@@ -21,7 +21,7 @@ jobs:
   # (e.g. release/net9) and wire up separate caller workflows targeting those branches.
 
   build:
-    uses: LayeredCraft/devops-templates/.github/workflows/publish-preview.yml@v10.1
+    uses: LayeredCraft/devops-templates/.github/workflows/publish-preview.yml@v10.3
     with:
       solution: LayeredCraft.Cdk.Constructs.slnx
       dotnetVersion:  |
@@ -39,6 +39,6 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: LayeredCraft/devops-templates/.github/actions/nuget-push@v10.1
+      - uses: LayeredCraft/devops-templates/.github/actions/nuget-push@v10.3
         with:
           nuget_user: ${{ secrets.NUGET_USER }}
diff --git a/.github/workflows/publish-release.yaml b/.github/workflows/publish-release.yaml
index 275d9e6..1376a65 100644
--- a/.github/workflows/publish-release.yaml
+++ b/.github/workflows/publish-release.yaml
@@ -12,7 +12,7 @@ jobs:
   # (e.g. release/net9) and wire up separate caller workflows targeting those branches.
 
   build:
-    uses: LayeredCraft/devops-templates/.github/workflows/publish-release.yml@v10.1
+    uses: LayeredCraft/devops-templates/.github/workflows/publish-release.yml@v10.3
     with:
       solution: LayeredCraft.Cdk.Constructs.slnx
       dotnetVersion:  |
@@ -30,6 +30,6 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: LayeredCraft/devops-templates/.github/actions/nuget-push@v10.1
+      - uses: LayeredCraft/devops-templates/.github/actions/nuget-push@v10.3
         with:
           nuget_user: ${{ secrets.NUGET_USER }}
diff --git a/.github/workflows/release-drafter.yaml b/.github/workflows/release-drafter.yaml
index 7db3a98..901c5e1 100644
--- a/.github/workflows/release-drafter.yaml
+++ b/.github/workflows/release-drafter.yaml
@@ -14,7 +14,7 @@ permissions:
 
 jobs:
   draft:
-    uses: LayeredCraft/devops-templates/.github/workflows/release-drafter.yml@v10.1
+    uses: LayeredCraft/devops-templates/.github/workflows/release-drafter.yml@v10.3
     with:
       event_name: ${{ github.event_name }}
       pr_draft: ${{ github.event.pull_request.draft == true }}
\ No newline at end of file