diff --git a/.github/workflows/agentics-maintenance.yml b/.github/workflows/agentics-maintenance.yml
index 61fcd5b..7c626c9 100644
--- a/.github/workflows/agentics-maintenance.yml
+++ b/.github/workflows/agentics-maintenance.yml
@@ -94,7 +94,7 @@ jobs:
       discussions: write
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -115,7 +115,7 @@ jobs:
       issues: write
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -136,7 +136,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -158,7 +158,7 @@ jobs:
       actions: write
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -189,7 +189,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -206,7 +206,7 @@ jobs:
             await main();
 
       - name: Install gh-aw
-        uses: github/gh-aw-actions/setup-cli@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup-cli@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           version: v0.88.2
 
@@ -240,7 +240,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -291,7 +291,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -341,7 +341,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -358,7 +358,7 @@ jobs:
             await main();
 
       - name: Install gh-aw
-        uses: github/gh-aw-actions/setup-cli@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup-cli@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           version: v0.88.2
 
@@ -391,7 +391,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -408,7 +408,7 @@ jobs:
             await main();
 
       - name: Install gh-aw
-        uses: github/gh-aw-actions/setup-cli@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup-cli@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           version: v0.88.2
 
@@ -498,7 +498,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -515,7 +515,7 @@ jobs:
             await main();
 
       - name: Install gh-aw
-        uses: github/gh-aw-actions/setup-cli@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup-cli@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           version: v0.88.2
 
@@ -594,7 +594,7 @@ jobs:
       issues: write
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -635,7 +635,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -652,7 +652,7 @@ jobs:
             await main();
 
       - name: Install gh-aw
-        uses: github/gh-aw-actions/setup-cli@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup-cli@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           version: v0.88.2
 
diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index 7cb7c26..42514c0 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -23,6 +23,6 @@ jobs:
         with:
           persist-credentials: false
       - name: Install gh-aw extension
-        uses: github/gh-aw-actions/setup-cli@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
+        uses: github/gh-aw-actions/setup-cli@34ac5c19ea597a7fc734abbd19d754f1f9a95a87 # v0.89.12
         with:
           version: v0.88.2
diff --git a/.github/workflows/upgrade.yml b/.github/workflows/upgrade.yml
index aebdf7e..30e3d98 100644
--- a/.github/workflows/upgrade.yml
+++ b/.github/workflows/upgrade.yml
@@ -71,7 +71,7 @@ jobs:
           gh aw compile --approve
 
       - name: Open or update a pull request with the results
-        uses: peter-evans/create-pull-request@22a9089034f40e5a961c8808d113e2c98fb63676 # v7
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8
         with:
           token: ${{ steps.app-token.outputs.token }}
           commit-message: "build: Upgrade gh-aw to ${{ steps.install.outputs.version }}"