diff --git a/.github/workflows/bot-bot.yml b/.github/workflows/bot-bot.yml
index 9af12fa98..21dc9fb83 100644
--- a/.github/workflows/bot-bot.yml
+++ b/.github/workflows/bot-bot.yml
@@ -18,7 +18,7 @@ jobs:
         with:
           path: cf-scripts
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: cf-scripts/conda-lock.yml
           environment-name: cf-scripts
diff --git a/.github/workflows/bot-cache.yml b/.github/workflows/bot-cache.yml
index bfc5c203b..dea9c1652 100644
--- a/.github/workflows/bot-cache.yml
+++ b/.github/workflows/bot-cache.yml
@@ -33,7 +33,7 @@ jobs:
         with:
           path: cf-scripts
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: cf-scripts/conda-lock.yml
           environment-name: cf-scripts
@@ -76,7 +76,7 @@ jobs:
         with:
           path: cf-scripts
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: cf-scripts/conda-lock.yml
           environment-name: cf-scripts
diff --git a/.github/workflows/bot-feedstocks.yml b/.github/workflows/bot-feedstocks.yml
index 29bd95e75..06da54ea0 100644
--- a/.github/workflows/bot-feedstocks.yml
+++ b/.github/workflows/bot-feedstocks.yml
@@ -19,7 +19,7 @@ jobs:
         with:
           path: cf-scripts
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: cf-scripts/conda-lock.yml
           environment-name: cf-scripts
diff --git a/.github/workflows/bot-make-graph.yml b/.github/workflows/bot-make-graph.yml
index 6a4094b0b..8ea5ed3cd 100644
--- a/.github/workflows/bot-make-graph.yml
+++ b/.github/workflows/bot-make-graph.yml
@@ -23,7 +23,7 @@ jobs:
         with:
           path: cf-scripts
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: cf-scripts/conda-lock.yml
           environment-name: cf-scripts
@@ -86,7 +86,7 @@ jobs:
         with:
           path: cf-scripts
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: cf-scripts/conda-lock.yml
           environment-name: cf-scripts
diff --git a/.github/workflows/bot-make-migrators.yml b/.github/workflows/bot-make-migrators.yml
index 826d7e4e0..98e525f63 100644
--- a/.github/workflows/bot-make-migrators.yml
+++ b/.github/workflows/bot-make-migrators.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           path: cf-scripts
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: cf-scripts/conda-lock.yml
           environment-name: cf-scripts
diff --git a/.github/workflows/bot-prs.yml b/.github/workflows/bot-prs.yml
index dd8dcc877..e5daa0a4d 100644
--- a/.github/workflows/bot-prs.yml
+++ b/.github/workflows/bot-prs.yml
@@ -23,7 +23,7 @@ jobs:
         with:
           path: cf-scripts
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: cf-scripts/conda-lock.yml
           environment-name: cf-scripts
@@ -89,7 +89,7 @@ jobs:
         with:
           path: cf-scripts
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: cf-scripts/conda-lock.yml
           environment-name: cf-scripts
diff --git a/.github/workflows/bot-pypi-mapping.yml b/.github/workflows/bot-pypi-mapping.yml
index 4c0e8777f..40f043bbe 100644
--- a/.github/workflows/bot-pypi-mapping.yml
+++ b/.github/workflows/bot-pypi-mapping.yml
@@ -19,7 +19,7 @@ jobs:
         with:
           path: cf-scripts
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: cf-scripts/conda-lock.yml
           environment-name: cf-scripts
diff --git a/.github/workflows/bot-update-status-page.yml b/.github/workflows/bot-update-status-page.yml
index 82458758a..c409e923d 100644
--- a/.github/workflows/bot-update-status-page.yml
+++ b/.github/workflows/bot-update-status-page.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           path: cf-scripts
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: cf-scripts/conda-lock.yml
           environment-name: cf-scripts
diff --git a/.github/workflows/bot-versions.yml b/.github/workflows/bot-versions.yml
index 48c71ebf5..c17e4aae9 100644
--- a/.github/workflows/bot-versions.yml
+++ b/.github/workflows/bot-versions.yml
@@ -23,7 +23,7 @@ jobs:
         with:
           path: cf-scripts
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: cf-scripts/conda-lock.yml
           environment-name: cf-scripts
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 84fc8f703..f61a7067c 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -26,7 +26,7 @@ jobs:
       - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
       - name: log into ghcr.io
-        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3
+        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
diff --git a/.github/workflows/keepalive.yml b/.github/workflows/keepalive.yml
index a7ee23d6a..0567607ba 100644
--- a/.github/workflows/keepalive.yml
+++ b/.github/workflows/keepalive.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
-      - uses: gautamkrishnar/keepalive-workflow@7fa96d25d8e4c2811d5405d6328111f1ef548246 # v2
+      - uses: gautamkrishnar/keepalive-workflow@05456e7809058d586d96392e99217726ccc10076 # v2
         with:
           commit_message: "Ah ah ah, stayin' alive"
           committer_username: conda-forge-bot
diff --git a/.github/workflows/relock.yml b/.github/workflows/relock.yml
index 47c59d076..7e3ad2c76 100644
--- a/.github/workflows/relock.yml
+++ b/.github/workflows/relock.yml
@@ -18,7 +18,7 @@ jobs:
     steps:
       - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: conda-lock.yml
           environment-name: cf-scripts
diff --git a/.github/workflows/test-model.yml b/.github/workflows/test-model.yml
index ac84c62be..ba565551b 100644
--- a/.github/workflows/test-model.yml
+++ b/.github/workflows/test-model.yml
@@ -19,7 +19,7 @@ jobs:
     steps:
       - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: conda-lock.yml
           environment-name: cf-scripts
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 851a5c785..2121882d7 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -25,7 +25,7 @@ jobs:
     steps:
       - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
-      - uses: mamba-org/setup-micromamba@422500192359a097648154e8db4e39bdb6c6eed7 # v1
+      - uses: mamba-org/setup-micromamba@f8b8a1e23a26f60a44c853292711bacfd3eac822 # v1
         with:
           environment-file: conda-lock.yml
           environment-name: cf-scripts