diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index cee6e6e..ad988eb 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -2,7 +2,7 @@
   "name": "ci-github-common",
   "image": "mcr.microsoft.com/devcontainers/base:debian",
   "features": {
-    "ghcr.io/devcontainers/features/docker-in-docker:": {
+    "ghcr.io/devcontainers/features/docker-in-docker:3": {
       "moby": false
     },
     "ghcr.io/devcontainers/features/github-cli:1": {
diff --git a/.github/workflows/__main-ci.yml b/.github/workflows/__main-ci.yml
index b60e646..f78bbf4 100644
--- a/.github/workflows/__main-ci.yml
+++ b/.github/workflows/__main-ci.yml
@@ -32,7 +32,7 @@ jobs:
   release:
     needs: ci
     if: github.event_name != 'schedule'
-    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@2c8e24b416226074aea1e240468f043edefc5760 # 0.23.2
+    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@ba941863a698984b6596e760f4e7727beea81167 # 0.26.0
     permissions:
       contents: read
     with:
diff --git a/.github/workflows/__test-action-parse-ci-reports.yml b/.github/workflows/__test-action-parse-ci-reports.yml
index cb7e053..b4c0fad 100644
--- a/.github/workflows/__test-action-parse-ci-reports.yml
+++ b/.github/workflows/__test-action-parse-ci-reports.yml
@@ -8,7 +8,7 @@ permissions:
 
 jobs:
   continuous-integration:
-    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@47891dc49a31209a88949e081d97a010f8cd20c4 # 0.23.2
+    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@6b74a8f070140f5c120f78026d58e4c00d1b1e37 # 0.24.2
     permissions:
       contents: read
       id-token: write
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index 877d20e..4b33815 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -99,7 +99,7 @@ jobs:
                 return;
               }
             }
-      - uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@47891dc49a31209a88949e081d97a010f8cd20c4 # 0.23.2
+      - uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@6b74a8f070140f5c120f78026d58e4c00d1b1e37 # 0.24.2
         if: ${{ steps.has-prettier-plugins.outputs.package-json-dir }}
         with:
           working-directory: ${{ steps.has-prettier-plugins.outputs.package-json-dir }}
@@ -129,11 +129,11 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
+      - uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
         with:
           languages: ${{ matrix.language }}
 
-      - uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
+      - uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
         with:
           category: "/language:${{matrix.language}}"
 
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index f9e6e38..3b9157a 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -68,7 +68,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
+      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10.3.0
         with:
           stale-issue-message: ${{ inputs.stale-issue-message || 'This issue is stale' }}
           stale-pr-message: ${{ inputs.stale-pr-message || 'This PR is stale' }}
diff --git a/actions/parse-ci-reports/action.yml b/actions/parse-ci-reports/action.yml
index 8cbb9b7..634af14 100644
--- a/actions/parse-ci-reports/action.yml
+++ b/actions/parse-ci-reports/action.yml
@@ -75,7 +75,7 @@ runs:
   using: "composite"
   steps:
     - name: Setup Node.js
-      uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@47891dc49a31209a88949e081d97a010f8cd20c4 # 0.23.2
+      uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@6b74a8f070140f5c120f78026d58e4c00d1b1e37 # 0.24.2
       with:
         working-directory: ${{ github.action_path }}