diff --git a/.github/workflows/bias-detection-ci.yml b/.github/workflows/bias-detection-ci.yml
index 3a0255f66..30f9e7188 100644
--- a/.github/workflows/bias-detection-ci.yml
+++ b/.github/workflows/bias-detection-ci.yml
@@ -276,7 +276,7 @@ jobs:
         run: bash scripts/devops/init-submodules.sh
 
       - name: Setup Python ${{ env.PYTHON_VERSION }}
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -433,7 +433,7 @@ jobs:
           clean-node-modules: 'true'
 
       - name: Setup Python for ML service
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
diff --git a/.github/workflows/linear-auto-close.yml b/.github/workflows/linear-auto-close.yml
index 61e3b6153..246968844 100644
--- a/.github/workflows/linear-auto-close.yml
+++ b/.github/workflows/linear-auto-close.yml
@@ -39,7 +39,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: '3.14'
 
diff --git a/.github/workflows/openapi-validation.yml b/.github/workflows/openapi-validation.yml
index 4d1fdb172..7114947da 100644
--- a/.github/workflows/openapi-validation.yml
+++ b/.github/workflows/openapi-validation.yml
@@ -89,7 +89,7 @@ jobs:
           submodules: recursive
 
       - name: Setup Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version-file: 'ai/.python-version'
 
diff --git a/.github/workflows/promotion-gate-test.yml b/.github/workflows/promotion-gate-test.yml
index ad594d60b..4083f5eff 100644
--- a/.github/workflows/promotion-gate-test.yml
+++ b/.github/workflows/promotion-gate-test.yml
@@ -33,7 +33,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: '3.14'
 
diff --git a/.github/workflows/sdk-generation.yml b/.github/workflows/sdk-generation.yml
index 7bdbfa48a..1e128590e 100644
--- a/.github/workflows/sdk-generation.yml
+++ b/.github/workflows/sdk-generation.yml
@@ -48,7 +48,7 @@ jobs:
           java-version: '17'
 
       - name: Setup Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: '3.14'
 
diff --git a/.github/workflows/security-deep.yml b/.github/workflows/security-deep.yml
index 3819e6b46..43e1c08ca 100644
--- a/.github/workflows/security-deep.yml
+++ b/.github/workflows/security-deep.yml
@@ -133,7 +133,7 @@ jobs:
       # --- Python dependencies ---
       - name: Setup Python
         if: matrix.language == 'python'
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -228,7 +228,7 @@ jobs:
         run: bash scripts/devops/init-submodules.sh
 
       - name: Set up Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -276,7 +276,7 @@ jobs:
       - name: Run Checkov infrastructure scan
         if: ${{ env['GHA_LOCAL_RUN'] != 'true' }}
         id: checkov_infra
-        uses: bridgecrewio/checkov-action@v12.3134.0
+        uses: bridgecrewio/checkov-action@v12.3135.0
         with:
           directory: .
           framework: terraform,terraform_plan,bicep
@@ -290,7 +290,7 @@ jobs:
       - name: Run Checkov Helm scan
         if: ${{ env['GHA_LOCAL_RUN'] != 'true' }}
         id: checkov_helm
-        uses: bridgecrewio/checkov-action@v12.3134.0
+        uses: bridgecrewio/checkov-action@v12.3135.0
         with:
           directory: ai/inference/deployment/pixel-voice
           framework: kubernetes,helm
diff --git a/.github/workflows/security-scanning.yml b/.github/workflows/security-scanning.yml
index 2ca996953..8e92d4b1f 100644
--- a/.github/workflows/security-scanning.yml
+++ b/.github/workflows/security-scanning.yml
@@ -42,7 +42,7 @@ jobs:
         run: bash scripts/devops/init-submodules.sh
 
       - name: Set up Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: '3.14.7'
 
@@ -88,7 +88,7 @@ jobs:
       - name: Run Checkov infrastructure scan
         if: ${{ env['GHA_LOCAL_RUN'] != 'true' }}
         id: checkov_infra
-        uses: bridgecrewio/checkov-action@v12.3134.0
+        uses: bridgecrewio/checkov-action@v12.3135.0
         with:
           directory: .
           framework: terraform,terraform_plan,bicep
@@ -103,7 +103,7 @@ jobs:
       - name: Run Checkov Kubernetes and Helm scan
         if: ${{ env['GHA_LOCAL_RUN'] != 'true' }}
         id: checkov_helm
-        uses: bridgecrewio/checkov-action@v12.3134.0
+        uses: bridgecrewio/checkov-action@v12.3135.0
         with:
           directory: ai/inference/deployment/pixel-voice
           framework: kubernetes,helm
@@ -321,7 +321,7 @@ jobs:
         run: bash scripts/devops/init-submodules.sh
 
       - name: Set up Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: '3.14.7'
 
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index ee14d64fb..2f5d98dde 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -112,7 +112,7 @@ jobs:
         run: bash scripts/devops/init-submodules.sh
 
       - name: Set up Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
diff --git a/.github/workflows/training-artifact-verification.yml b/.github/workflows/training-artifact-verification.yml
index 59d19dac7..84c8e95ef 100644
--- a/.github/workflows/training-artifact-verification.yml
+++ b/.github/workflows/training-artifact-verification.yml
@@ -38,7 +38,7 @@ jobs:
         run: bash scripts/devops/init-submodules.sh
 
       - name: Setup Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: '3.14.7'
 
diff --git a/.github/workflows/training-pipeline.yml b/.github/workflows/training-pipeline.yml
index 780d0eb62..5e4b1d246 100644
--- a/.github/workflows/training-pipeline.yml
+++ b/.github/workflows/training-pipeline.yml
@@ -74,7 +74,7 @@ jobs:
         run: bash scripts/devops/init-submodules.sh
 
       - name: Setup Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -204,7 +204,7 @@ jobs:
         run: bash scripts/devops/init-submodules.sh
 
       - name: Setup Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -286,7 +286,7 @@ jobs:
         run: bash scripts/devops/init-submodules.sh
 
       - name: Setup Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -344,7 +344,7 @@ jobs:
         run: bash scripts/devops/init-submodules.sh
 
       - name: Setup Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -385,7 +385,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -560,7 +560,7 @@ jobs:
         run: bash scripts/devops/init-submodules.sh
 
       - name: Setup Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}