diff --git a/.github/workflows/backport.yaml b/.github/workflows/backport.yaml
index 0d8293ce..a53267e4 100644
--- a/.github/workflows/backport.yaml
+++ b/.github/workflows/backport.yaml
@@ -7,6 +7,6 @@ jobs:
     permissions:
       contents: write # for reading and creating branches.
       pull-requests: write # for creating pull requests against release branches.
-    uses: fluxcd/gha-workflows/.github/workflows/backport.yaml@v0.11.0
+    uses: fluxcd/gha-workflows/.github/workflows/backport.yaml@v0.12.0
     secrets:
       github-token: ${{ secrets.BOT_GITHUB_TOKEN }}
diff --git a/.github/workflows/cifuzz.yaml b/.github/workflows/cifuzz.yaml
index b5c590b7..e33522cb 100644
--- a/.github/workflows/cifuzz.yaml
+++ b/.github/workflows/cifuzz.yaml
@@ -10,7 +10,7 @@ jobs:
       contents: read # for reading the repository code.
     steps:
       - name: Test suite setup
-        uses: fluxcd/gha-workflows/.github/actions/setup-kubernetes@v0.11.0
+        uses: fluxcd/gha-workflows/.github/actions/setup-kubernetes@v0.12.0
         with:
           go-version: 1.26.x
       - name: Smoke test Fuzzers
diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
index 3aea1b97..a8357054 100644
--- a/.github/workflows/e2e.yaml
+++ b/.github/workflows/e2e.yaml
@@ -12,9 +12,9 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Setup Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version: 1.26.x
           cache-dependency-path: |
@@ -42,7 +42,7 @@ jobs:
       contents: read # for reading the repository code.
     steps:
       - name: Test suite setup
-        uses: fluxcd/gha-workflows/.github/actions/setup-kubernetes@v0.11.0
+        uses: fluxcd/gha-workflows/.github/actions/setup-kubernetes@v0.12.0
         with:
           go-version: 1.26.x
       - name: Build container image
@@ -133,7 +133,7 @@ jobs:
       contents: read # for reading the repository code.
     steps:
       - name: Test suite setup
-        uses: fluxcd/gha-workflows/.github/actions/setup-kubernetes@v0.11.0
+        uses: fluxcd/gha-workflows/.github/actions/setup-kubernetes@v0.12.0
         with:
           go-version: 1.26.x
       - name: Setup SOPS
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index b1d02f0b..53e7ce8e 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -15,7 +15,7 @@ jobs:
       contents: write # for creating the GitHub release.
       id-token: write # for creating OIDC tokens for signing.
       packages: write # for pushing and signing container images.
-    uses: fluxcd/gha-workflows/.github/workflows/controller-release.yaml@v0.11.0
+    uses: fluxcd/gha-workflows/.github/workflows/controller-release.yaml@v0.12.0
     with:
       controller: ${{ github.event.repository.name }}
       release-candidate-prefix: ${{ github.event.inputs.tag }}
diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
index 45334e37..d082eeb0 100644
--- a/.github/workflows/scan.yml
+++ b/.github/workflows/scan.yml
@@ -11,7 +11,7 @@ jobs:
     permissions:
       contents: read # for reading the repository code.
       security-events: write # for uploading the CodeQL analysis results.
-    uses: fluxcd/gha-workflows/.github/workflows/code-scan.yaml@v0.11.0
+    uses: fluxcd/gha-workflows/.github/workflows/code-scan.yaml@v0.12.0
     secrets:
       github-token: ${{ secrets.GITHUB_TOKEN }}
       fossa-token: ${{ secrets.FOSSA_TOKEN }}
diff --git a/.github/workflows/sync-labels.yaml b/.github/workflows/sync-labels.yaml
index 168e024e..0acd55b5 100644
--- a/.github/workflows/sync-labels.yaml
+++ b/.github/workflows/sync-labels.yaml
@@ -11,6 +11,6 @@ jobs:
     permissions:
       contents: read # for reading the labels file.
       issues: write # for creating and updating labels.
-    uses: fluxcd/gha-workflows/.github/workflows/labels-sync.yaml@v0.11.0
+    uses: fluxcd/gha-workflows/.github/workflows/labels-sync.yaml@v0.12.0
     secrets:
       github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/upgrade-fluxcd-pkg.yaml b/.github/workflows/upgrade-fluxcd-pkg.yaml
index f263d408..d37a60e5 100644
--- a/.github/workflows/upgrade-fluxcd-pkg.yaml
+++ b/.github/workflows/upgrade-fluxcd-pkg.yaml
@@ -5,6 +5,6 @@ on:
 
 jobs:
   upgrade-fluxcd-pkg:
-    uses: fluxcd/gha-workflows/.github/workflows/upgrade-fluxcd-pkg.yaml@v0.11.0
+    uses: fluxcd/gha-workflows/.github/workflows/upgrade-fluxcd-pkg.yaml@v0.12.0
     secrets:
       github-token: ${{ secrets.BOT_GITHUB_TOKEN }}