diff --git a/.github/workflows/apm-materialize.yml b/.github/workflows/apm-materialize.yml
index 63bdd8a..065e024 100644
--- a/.github/workflows/apm-materialize.yml
+++ b/.github/workflows/apm-materialize.yml
@@ -42,7 +42,7 @@ jobs:
     steps:
       - name: Harden runner
         # renovate: datasource=github-tags depName=DevSecNinja/.github
-        uses: DevSecNinja/.github/actions/harden-runner@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+        uses: DevSecNinja/.github/actions/harden-runner@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
 
       - name: Generate App token
         id: app-token
@@ -104,7 +104,7 @@ jobs:
       - name: Open materialize PR
         if: steps.precheck.outputs.skip != 'true'
         # renovate: datasource=github-tags depName=DevSecNinja/.github
-        uses: DevSecNinja/.github/actions/open-pr@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+        uses: DevSecNinja/.github/actions/open-pr@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
         with:
           branch: chore/apm-materialize
           base: main
diff --git a/.github/workflows/apm-sync.yml b/.github/workflows/apm-sync.yml
index 6faacd1..d9619ff 100644
--- a/.github/workflows/apm-sync.yml
+++ b/.github/workflows/apm-sync.yml
@@ -88,7 +88,7 @@ jobs:
     steps:
       - name: Harden runner
         # renovate: datasource=github-tags depName=DevSecNinja/.github
-        uses: DevSecNinja/.github/actions/harden-runner@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+        uses: DevSecNinja/.github/actions/harden-runner@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
 
       - name: Generate App token
         id: app-token
@@ -149,7 +149,7 @@ jobs:
         id: open-pr
         if: steps.precheck.outputs.skip != 'true'
         # renovate: datasource=github-tags depName=DevSecNinja/.github
-        uses: DevSecNinja/.github/actions/open-pr@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+        uses: DevSecNinja/.github/actions/open-pr@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
         with:
           branch: ${{ inputs.pr-branch }}
           base: ${{ inputs.target-branch }}
diff --git a/.github/workflows/config-sync.yml b/.github/workflows/config-sync.yml
index 2ee8487..33b8609 100644
--- a/.github/workflows/config-sync.yml
+++ b/.github/workflows/config-sync.yml
@@ -173,7 +173,7 @@ jobs:
           fi
       - name: Create PR if configs changed
         if: steps.pull.outputs.updated == '1'
-        uses: DevSecNinja/.github/actions/open-pr@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+        uses: DevSecNinja/.github/actions/open-pr@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
         with:
           branch: chore/config-sync
           title: 'chore: sync config files from central repo'
diff --git a/.github/workflows/vendored-file-sync.yml b/.github/workflows/vendored-file-sync.yml
index 404f3ec..14b48c8 100644
--- a/.github/workflows/vendored-file-sync.yml
+++ b/.github/workflows/vendored-file-sync.yml
@@ -149,7 +149,7 @@ jobs:
       - name: Open or update vendored-file sync PR
         id: open-pr
         if: ${{ inputs.create-pr && steps.detect.outputs.changed == 'true' }}
-        uses: DevSecNinja/.github/actions/open-pr@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+        uses: DevSecNinja/.github/actions/open-pr@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
         with:
           branch: ${{ inputs.branch }}
           base: ${{ inputs.base }}
diff --git a/workflow-templates/assign-issue-to-codeowners.yml b/workflow-templates/assign-issue-to-codeowners.yml
index 3b7ce2e..47bcac7 100644
--- a/workflow-templates/assign-issue-to-codeowners.yml
+++ b/workflow-templates/assign-issue-to-codeowners.yml
@@ -17,7 +17,7 @@ permissions:
 
 jobs:
   assign:
-    uses: DevSecNinja/.github/.github/workflows/assign-issue-to-codeowners.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+    uses: DevSecNinja/.github/.github/workflows/assign-issue-to-codeowners.yml@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
     with:
       issue-number: ${{ inputs.issue-number || 0 }}
     permissions:
diff --git a/workflow-templates/config-sync.yml b/workflow-templates/config-sync.yml
index ed841ea..09a76ec 100644
--- a/workflow-templates/config-sync.yml
+++ b/workflow-templates/config-sync.yml
@@ -12,7 +12,7 @@ permissions:
 
 jobs:
   sync:
-    uses: DevSecNinja/.github/.github/workflows/config-sync.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+    uses: DevSecNinja/.github/.github/workflows/config-sync.yml@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
     permissions:
       contents: write
       pull-requests: write
diff --git a/workflow-templates/label-sync.yml b/workflow-templates/label-sync.yml
index 52190f9..38e62aa 100644
--- a/workflow-templates/label-sync.yml
+++ b/workflow-templates/label-sync.yml
@@ -17,7 +17,7 @@ permissions:
 
 jobs:
   label-sync:
-    uses: DevSecNinja/.github/.github/workflows/label-sync.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+    uses: DevSecNinja/.github/.github/workflows/label-sync.yml@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
     permissions:
       contents: read
       issues: write
diff --git a/workflow-templates/labeler.yml b/workflow-templates/labeler.yml
index e201abf..53fa05b 100644
--- a/workflow-templates/labeler.yml
+++ b/workflow-templates/labeler.yml
@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   labeler:
-    uses: DevSecNinja/.github/.github/workflows/labeler.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+    uses: DevSecNinja/.github/.github/workflows/labeler.yml@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
     permissions:
       contents: read
       pull-requests: write
diff --git a/workflow-templates/lint.yml b/workflow-templates/lint.yml
index e3deaef..338fa68 100644
--- a/workflow-templates/lint.yml
+++ b/workflow-templates/lint.yml
@@ -12,7 +12,7 @@ permissions:
 
 jobs:
   lint:
-    uses: DevSecNinja/.github/.github/workflows/lint.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+    uses: DevSecNinja/.github/.github/workflows/lint.yml@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
     permissions:
       contents: read
       security-events: write
diff --git a/workflow-templates/pages.yml b/workflow-templates/pages.yml
index dbfef3d..4f20326 100644
--- a/workflow-templates/pages.yml
+++ b/workflow-templates/pages.yml
@@ -23,7 +23,7 @@ permissions:
 
 jobs:
   pages:
-    uses: DevSecNinja/.github/.github/workflows/pages.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+    uses: DevSecNinja/.github/.github/workflows/pages.yml@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
     permissions:
       contents: read
       deployments: write
diff --git a/workflow-templates/release-please.yml b/workflow-templates/release-please.yml
index bad1900..c42cc23 100644
--- a/workflow-templates/release-please.yml
+++ b/workflow-templates/release-please.yml
@@ -33,7 +33,7 @@ permissions:
 
 jobs:
   release-please:
-    uses: DevSecNinja/.github/.github/workflows/release-please.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+    uses: DevSecNinja/.github/.github/workflows/release-please.yml@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
     permissions:
       contents: write
       pull-requests: write
diff --git a/workflow-templates/release.yml b/workflow-templates/release.yml
index d7abb32..bc2c030 100644
--- a/workflow-templates/release.yml
+++ b/workflow-templates/release.yml
@@ -11,7 +11,7 @@ permissions:
 
 jobs:
   release:
-    uses: DevSecNinja/.github/.github/workflows/release.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+    uses: DevSecNinja/.github/.github/workflows/release.yml@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
     permissions:
       contents: write
     with:
diff --git a/workflow-templates/todo-to-issue.yml b/workflow-templates/todo-to-issue.yml
index 2cf6c07..351d9c4 100644
--- a/workflow-templates/todo-to-issue.yml
+++ b/workflow-templates/todo-to-issue.yml
@@ -12,7 +12,7 @@ permissions:
 
 jobs:
   run:
-    uses: DevSecNinja/.github/.github/workflows/todo-to-issue.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+    uses: DevSecNinja/.github/.github/workflows/todo-to-issue.yml@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 # v2.2.0
     permissions:
       contents: read
       issues: write