diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ef77a02..a1e35cd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -40,7 +40,7 @@ jobs:
       contents: read
       actions: write  # Needed for artifact upload
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       
       # Install Rust toolchain
       - name: Install Rust toolchain
@@ -55,7 +55,7 @@ jobs:
       # Tiered caching strategy for Cargo registry
       - name: Cache dependencies
         id: cache_security_dependencies
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             ~/.cargo/registry/index
@@ -68,7 +68,7 @@ jobs:
       # Cache installed tools separately
       - name: Cache installed tools
         id: cache_security_tools
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             ~/.cargo/bin/cargo-audit*
@@ -79,7 +79,7 @@ jobs:
       # Use optimized Rust caching
       - name: Rust Cache
         id: cache_security_rust
-        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+        uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
         with:
           workspaces: "."
           save-if: true
@@ -214,7 +214,7 @@ jobs:
 
       # Install security scanning tools with versioning for stability
       - name: Install security tools
-        uses: taiki-e/install-action@b8cecb83565409bcc297b2df6e77f030b2a468d5 # v2.82.0
+        uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2.85.10
         with:
           tool: cargo-audit@0.22.1,cargo-deny@0.19.0,cargo-supply-chain@0.3.7
 
@@ -458,7 +458,7 @@ jobs:
           - os: windows-11-arm
             target: aarch64-pc-windows-msvc
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       # Set up Rust with toolchain caching
       - name: Install Rust toolchain
@@ -475,7 +475,7 @@ jobs:
       # Tiered caching strategy for Cargo registry
       - name: Cache dependencies
         id: cache_test_dependencies
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             ~/.cargo/registry/index
@@ -488,7 +488,7 @@ jobs:
       # Cache installed tools separately
       - name: Cache installed tools
         id: cache_test_tools
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             ~/.cargo/bin/cargo-nextest*
@@ -497,7 +497,7 @@ jobs:
       # Use optimized Rust caching
       - name: Rust Cache
         id: cache_test_rust
-        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+        uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
         with:
           workspaces: "."
           save-if: true
@@ -649,7 +649,7 @@ jobs:
 
       # Install cargo-nextest for faster testing
       - name: Install cargo-nextest
-        uses: taiki-e/install-action@b8cecb83565409bcc297b2df6e77f030b2a468d5 # v2.82.0
+        uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2.85.10
         with:
           tool: cargo-nextest@0.9.132
 
@@ -714,7 +714,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Check out code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       # Set up Rust with toolchain caching
       - name: Install Rust toolchain
@@ -736,7 +736,7 @@ jobs:
       # Tiered caching strategy for Cargo registry
       - name: Cache dependencies
         id: cache_release_dependencies
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             ~/.cargo/registry/index
@@ -750,7 +750,7 @@ jobs:
       - name: Cache cross toolchains
         id: cache_release_cross_toolchains
         if: runner.os == 'Linux'
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             /home/runner/.rustup/toolchains/*-aarch64-*
@@ -760,7 +760,7 @@ jobs:
       # Use optimized Rust caching
       - name: Rust Cache
         id: cache_release_rust
-        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+        uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
         with:
           workspaces: "."
           save-if: true  # Always save cache for releases
@@ -899,7 +899,7 @@ jobs:
       # Setup cross-compilation for ARM targets (Linux)
       - name: Setup cross-compilation (Linux)
         if: runner.os == 'Linux'
-        uses: taiki-e/setup-cross-toolchain-action@3d9770ce98eb7dbcf378563182a5e8031165f75b # v1.41.0
+        uses: taiki-e/setup-cross-toolchain-action@12b7ad4acfa95a1476779d6c06699b96ec1691f8 # v1.42.0
         with:
           target: ${{ matrix.targets[1] }}
 
@@ -995,13 +995,13 @@ jobs:
       changelog: ${{ steps.github_release.outputs.changelog }}
     steps:
       - name: Check out code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
 
       - name: Generate changelog
         id: github_release
-        uses: mikepenz/release-changelog-builder-action@348e88fab4c37338b1e803ceb2d4a7a5db6c0833 # v6.2.2
+        uses: mikepenz/release-changelog-builder-action@c9bcd8238b6f41e05561348339429d360b1c0247 # v6.2.3
         with:
           configuration: |
             {
@@ -1050,7 +1050,7 @@ jobs:
       discussions: write  # If you want to publish to discussions
     steps:
       - name: Check out code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         
       # Download all artifacts with better error handling
       - name: Download release artifacts
@@ -1071,7 +1071,7 @@ jobs:
 
       # Create GitHub Release with all binaries
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
         with:
           body: ${{ needs.changelog.outputs.changelog }}
           files: release-artifacts/**/*
diff --git a/.github/workflows/update_database.yml b/.github/workflows/update_database.yml
index 1493e90..7529962 100644
--- a/.github/workflows/update_database.yml
+++ b/.github/workflows/update_database.yml
@@ -14,10 +14,10 @@ jobs:
   update-database:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       
       - name: Set up Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: '3.11'