diff --git a/.github/workflows/golicenses.yaml b/.github/workflows/golicenses.yaml
index 704843f..65042c5 100644
--- a/.github/workflows/golicenses.yaml
+++ b/.github/workflows/golicenses.yaml
@@ -11,7 +11,7 @@ jobs:
   golicenses:
     runs-on: [self-hosted, Linux, X64, validator]
     container:
-      image: us-docker.pkg.dev/palette-images/build-base-images/golang:1.23-alpine
+      image: us-docker.pkg.dev/palette-images/build-base-images/golang:1.25-alpine
     steps:
       - name: checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
diff --git a/.github/workflows/govulncheck.yaml b/.github/workflows/govulncheck.yaml
index a7f56cc..b3d6463 100644
--- a/.github/workflows/govulncheck.yaml
+++ b/.github/workflows/govulncheck.yaml
@@ -12,7 +12,7 @@ jobs:
   govulncheck:
     runs-on: [self-hosted, Linux, X64, validator]
     container:
-      image: us-docker.pkg.dev/palette-images/build-base-images/golang:1.23-alpine
+      image: us-docker.pkg.dev/palette-images/build-base-images/golang:1.25-alpine
     steps:
       - name: install-govulncheck
         run: GOBIN=/usr/local/bin go install golang.org/x/vuln/cmd/govulncheck@latest
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 11f42af..cc95bc9 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -103,7 +103,7 @@ jobs:
           cache-to: type=gha,scope=${{ github.ref_name }}-${{ env.IMAGE_TAG }}
 
       - name: Generate SBOM
-        uses: anchore/sbom-action@55dc4ee22412511ee8c3142cbea40418e6cec693 # v0.17.8
+        uses: anchore/sbom-action@da167eac915b4e86f08b264dbdbc867b61be6f0c # v0.20.5
         with:
           image: ${{ env.IMAGE_TAG }}
           artifact-name: sbom-${{ env.IMAGE_NAME }}
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 1e70bd5..f36de44 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -29,7 +29,7 @@ jobs:
 
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
-          python-version: '3.9'
+          python-version: '3.13'
           check-latest: true
 
       - name: Set up frigate
@@ -77,11 +77,11 @@ jobs:
 
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
-          python-version: '3.9'
+          python-version: '3.13'
           check-latest: true
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1
+        uses: helm/chart-testing-action@0d28d3144d3a25ea2cc349d6e59901c4ff469b3b # v2.7.0
 
       - name: Set up Docker Buildx
         id: buildx
@@ -112,7 +112,7 @@ jobs:
 
       - name: Create kind cluster
         if: steps.list-changed.outputs.changed == 'true'
-        uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde # v1.10.0
+        uses: helm/kind-action@a1b0e391336a6ee6713a0583f8c6240d70863de3 # v1.12.0
         with:
           cluster_name: ct-${{ steps.short-sha.outputs.sha }}