diff --git a/actions/azp/agent-cleanup/action.yml b/actions/azp/agent-cleanup/action.yml
index 49e46e1b5c..7e7384e2c5 100644
--- a/actions/azp/agent-cleanup/action.yml
+++ b/actions/azp/agent-cleanup/action.yml
@@ -21,13 +21,13 @@ runs:
 
   - id: fetch
     name: Fetch AZP agents list
-    uses: envoyproxy/toolshed/actions/fetch@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/fetch@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       url: https://dev.azure.com/${{ inputs.azp-org }}/_apis/distributedtask/pools/${{ inputs.pool-id }}/agents?api-version=7.1-preview.1
       args: -u ":${{ inputs.azp-token }}"
 
   - name: Get dead AZP agent ids
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input-format: json-path
       input: ${{ steps.fetch.outputs.path }}
diff --git a/actions/bazel/cache/resolve/action.yml b/actions/bazel/cache/resolve/action.yml
index 92ded2685c..9417e40306 100644
--- a/actions/bazel/cache/resolve/action.yml
+++ b/actions/bazel/cache/resolve/action.yml
@@ -37,7 +37,7 @@ runs:
 
   - id: keys
     if: ${{ inputs.keys }}
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input-format: text
       input: ${{ inputs.keys }}
@@ -48,7 +48,7 @@ runs:
         | map(select(length > 0))
 
   - id: entries
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input-format: yaml
       input: ${{ inputs.entries }}
@@ -64,7 +64,7 @@ runs:
           end
 
   - id: resolved
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input-format: yaml-path
       input: ${{ inputs.lock-file }}
@@ -85,7 +85,7 @@ runs:
               end)
 
   - id: modules
-    uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input: ${{ steps.resolved.outputs.value }}
       input-format: json
@@ -115,7 +115,7 @@ runs:
       result-filter-options: -csR
 
   - id: caches
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input: ${{ steps.resolved.outputs.value }}
       options: >-
diff --git a/actions/bind-mounts/action.yml b/actions/bind-mounts/action.yml
index b5cd4d1e76..0a14f3ced1 100644
--- a/actions/bind-mounts/action.yml
+++ b/actions/bind-mounts/action.yml
@@ -23,7 +23,7 @@ runs:
   using: composite
   steps:
   - name: Bind mount directories
-    uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: mount
     with:
       input: ${{ inputs.mounts }}
diff --git a/actions/bson/action.yml b/actions/bson/action.yml
index aa88e7238c..c63d1aaddb 100644
--- a/actions/bson/action.yml
+++ b/actions/bson/action.yml
@@ -48,7 +48,7 @@ runs:
       chmod +x $TMPFILE
       echo "path=$TMPFILE" >> $GITHUB_OUTPUT
     shell: bash
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: command
     with:
       input: ${{ inputs.input }}
@@ -76,7 +76,7 @@ runs:
       TMPFILE: ${{ steps.script.outputs.path }}
     shell: bash
   - id: output
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: ${{ inputs.result-filter }}
     with:
       input: ${{ steps.run.outputs.output }}
diff --git a/actions/buildah/action.yml b/actions/buildah/action.yml
index dc42993e1b..4ec304c1aa 100644
--- a/actions/buildah/action.yml
+++ b/actions/buildah/action.yml
@@ -65,7 +65,7 @@ runs:
       echo '${{ inputs.gcr-key }}' | base64 -d | buildah login --username _json_key --password-stdin gcr.io
       echo "::endgroup::"
   - name: Execute buildah operations
-    uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: execute
     with:
       title: Execute buildah operations
diff --git a/actions/cache/prime/action.yml b/actions/cache/prime/action.yml
index 935300d285..fdb9667e71 100644
--- a/actions/cache/prime/action.yml
+++ b/actions/cache/prime/action.yml
@@ -73,7 +73,7 @@ runs:
     id: gcs-object
     if: >-
       inputs.cache-type == 'gcs'
-    uses: envoyproxy/toolshed/actions/gcs/cache/exists@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/gcs/cache/exists@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       bucket: ${{ inputs.gcs-bucket }}
       key: ${{ inputs.key }}
@@ -81,7 +81,7 @@ runs:
     id: artifact-object
     if: >-
       inputs.cache-type == 'artifact'
-    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       name: ${{ inputs.key }}
       wf-path: ${{ inputs.artifact-wf-path }}
@@ -97,7 +97,7 @@ runs:
       key: ${{ inputs.key }}
 
   # Mutex
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: >-
       ! inputs.lock-id
       && steps.cache-restore-initial.outputs.cache-hit != 'true'
@@ -109,7 +109,7 @@ runs:
       options: -Rr
       filter: |
         @base64
-  - uses: envoyproxy/toolshed/actions/github/mutex@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/github/mutex@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: >-
       inputs.lock-token
       && steps.cache-restore-initial.outputs.cache-hit != 'true'
@@ -137,7 +137,7 @@ runs:
     if: >-
       inputs.cache-type == 'artifact'
       && steps.artifact-object.outputs.exists == ''
-    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       name: ${{ inputs.key }}
       wf-path: ${{ inputs.artifact-wf-path }}
@@ -146,7 +146,7 @@ runs:
     if: >-
       inputs.cache-type == 'gcs'
       && steps.gcs-object.outputs.exists != 'true'
-    uses: envoyproxy/toolshed/actions/gcs/cache/exists@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/gcs/cache/exists@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       bucket: ${{ inputs.gcs-bucket }}
       key: ${{ inputs.key }}
@@ -214,7 +214,7 @@ runs:
   - if: >-
       steps.restore.outputs.save == 'true'
       && inputs.gcs-bucket
-    uses: envoyproxy/toolshed/actions/gcs/cache/save@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/gcs/cache/save@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       bucket: ${{ inputs.gcs-bucket }}
       key: ${{ inputs.key }}
@@ -224,7 +224,7 @@ runs:
     if: >-
       steps.restore.outputs.save == 'true'
       && inputs.cache-type == 'artifact'
-    uses: envoyproxy/toolshed/actions/github/artifact/cache/save@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/github/artifact/cache/save@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       name: ${{ inputs.artifact-name }}
       path: ${{ inputs.path || inputs.path-tmp }}
diff --git a/actions/cache/restore/action.yml b/actions/cache/restore/action.yml
index ce5fdbf566..5289724a62 100644
--- a/actions/cache/restore/action.yml
+++ b/actions/cache/restore/action.yml
@@ -72,7 +72,7 @@ runs:
     if: >-
       inputs.cache-type == 'gcs'
     id: cache-restore-gcs
-    uses: envoyproxy/toolshed/actions/gcs/cache/restore@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/gcs/cache/restore@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       bucket: ${{ inputs.gcs-bucket }}
       path: ${{ inputs.path || inputs.path-tmp }}
@@ -81,7 +81,7 @@ runs:
     if: >-
       inputs.cache-type == 'artifact'
     id: cache-restore-artifact
-    uses: envoyproxy/toolshed/actions/github/artifact/cache/restore@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/github/artifact/cache/restore@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       id: ${{ inputs.artifact-id }}
       name: ${{ inputs.artifact-name }}
diff --git a/actions/docker/cache/prime/action.yml b/actions/docker/cache/prime/action.yml
index d8efe476d0..0ee5f5b7f7 100644
--- a/actions/docker/cache/prime/action.yml
+++ b/actions/docker/cache/prime/action.yml
@@ -21,7 +21,7 @@ outputs:
 runs:
   using: "composite"
   steps:
-  - uses: envoyproxy/toolshed/actions/cache/prime@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/cache/prime@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: prime
     with:
       key: ${{ inputs.image-tag }}${{ inputs.key-suffix }}
diff --git a/actions/docker/cache/restore/action.yml b/actions/docker/cache/restore/action.yml
index 163b3fa0bd..b54961038c 100644
--- a/actions/docker/cache/restore/action.yml
+++ b/actions/docker/cache/restore/action.yml
@@ -18,7 +18,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-  - uses: envoyproxy/toolshed/actions/cache/restore@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/cache/restore@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       key: ${{ inputs.image-tag }}${{ inputs.key-suffix }}
       command: |
diff --git a/actions/docker/fetch/action.yml b/actions/docker/fetch/action.yml
index 8101805019..7b7b49851f 100644
--- a/actions/docker/fetch/action.yml
+++ b/actions/docker/fetch/action.yml
@@ -13,7 +13,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-  - uses: envoyproxy/toolshed/actions/fetch@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/fetch@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: fetch
     with:
       url: ${{ inputs.url }}
diff --git a/actions/docker/shas/action.yml b/actions/docker/shas/action.yml
index f3383db23c..ff1c1d5f00 100644
--- a/actions/docker/shas/action.yml
+++ b/actions/docker/shas/action.yml
@@ -14,24 +14,24 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: yaml
     with:
       input: ${{ inputs.images }}
       input-format: yaml
-  - uses: envoyproxy/toolshed/actions/foreach@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/foreach@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: json_actions
     with:
       items: ${{ steps.yaml.outputs.value }}
       steps: |
-        - uses: envoyproxy/toolshed/actions/docker/sha@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+        - uses: envoyproxy/toolshed/actions/docker/sha@a76c2dca927b8ca922d0e76d5d637d604e6851c9
           id: $KEY
           with:
             image: >-
               %{{ fromJSON(inputs.context).items['$KEY'] }}
             env_var: ${{ inputs.env_prefix }}_$KEY
 
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: images
     with:
       input: ${{ steps.json_actions.outputs.out }}
diff --git a/actions/envoy/ci/env/action.yml b/actions/envoy/ci/env/action.yml
index fc0d0134f7..2a4b147970 100644
--- a/actions/envoy/ci/env/action.yml
+++ b/actions/envoy/ci/env/action.yml
@@ -52,7 +52,7 @@ runs:
   steps:
 
   # Check current/requested config (currently only build-images can be overridden)
-  - uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: config
     with:
       title: fetch ${{ inputs.branch-name }}:${{ inputs.config-file }}
@@ -70,7 +70,7 @@ runs:
       result-filter: .
 
   - id: build-images
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input-format: yaml-path
       input: ${{ inputs.config-file }}
@@ -86,7 +86,7 @@ runs:
         | {$requested}
 
   # Check request version
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Validate given version string
     id: version
     with:
@@ -105,7 +105,7 @@ runs:
         | {requested: .}
 
   - id: request
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input: |
         actor: ${{ toJSON(github.actor) }}
@@ -138,7 +138,7 @@ runs:
                "build-image": $build_image,
                "build-image-current": $build_images.current}
 
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Create data
     id: data
     with:
diff --git a/actions/envoy/ci/request/action.yml b/actions/envoy/ci/request/action.yml
index 2403c69b40..a9b5bd0df0 100644
--- a/actions/envoy/ci/request/action.yml
+++ b/actions/envoy/ci/request/action.yml
@@ -95,7 +95,7 @@ runs:
           exit 1
       fi
   - id: trusted
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     env:
       TRUSTED_BOTS: ${{ inputs.trusted_bots || inputs.trusted-bots }}
     with:
@@ -116,7 +116,7 @@ runs:
         | (. and ($input.event_name | startswith("pull_request") | not))
 
   # Check requested changes
-  - uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: changed
     with:
       title: git diff changes from ${{ inputs.merge-commit || 'HEAD^1' }}
@@ -137,7 +137,7 @@ runs:
         | split("\n")
 
   # Check current/requested config (currently only build-images can be overridden)
-  - uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: config
     with:
       title: fetch ${{ inputs.branch-name }}:${{ inputs.config-file }}
@@ -164,7 +164,7 @@ runs:
   # branch, never the PR head, but it is still passed as data rather than
   # interpolated into the filter.
   - id: build-images
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     env:
       BUILD_IMAGE_REPOS: ${{ inputs.build-image-repos }}
       CURRENT_CONFIG: ${{ steps.config.outputs.output }}
@@ -192,7 +192,7 @@ runs:
         | map_values(map_values(validate::image_prefix($repos)))
 
   # Check current/request versions
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Validate given version string
     id: version-string
     with:
@@ -201,7 +201,7 @@ runs:
       input: ${{ inputs.working-directory }}/VERSION.txt
       filter: |
         validate::version
-  - uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: version
     env:
       CHANGED_FILES: ${{ steps.changed.outputs.output || '[]' }}
@@ -238,7 +238,7 @@ runs:
   # WARNING: `message` (PR title/body) and `actor` are user data - they are
   # passed to jq as data, never interpolated into the filter.
   - id: request
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     env:
       BUILD_IMAGES: ${{ steps.build-images.outputs.value }}
       MERGE_COMMIT: ${{ inputs.merge-commit }}
@@ -304,11 +304,11 @@ runs:
 
   - name: Run config
     id: run-config
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input-format: yaml
       input: ${{ toJSON(fromJSON(steps.config.outputs.output).run) }}
-  - uses: envoyproxy/toolshed/actions/torun@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/torun@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: torun
     with:
       event: ${{ github.event_name }}
@@ -318,7 +318,7 @@ runs:
   # NB: `config`/`changed` are read from the target branch, never the PR head,
   # but they are passed to jq as data (`env`) rather than interpolated into the
   # filter, so this does not depend on that invariant.
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Create data
     id: data
     env:
diff --git a/actions/envoy/run/summary/action.yml b/actions/envoy/run/summary/action.yml
index 7f4d719bda..d83e96c1bd 100644
--- a/actions/envoy/run/summary/action.yml
+++ b/actions/envoy/run/summary/action.yml
@@ -113,12 +113,12 @@ inputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: ${{ fromJSON(env.CI_DEBUG || 'false') && true || false }}
     with:
       input: ${{ inputs.context }}
       print-result: true
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Runtime information
     id: run-info
     with:
@@ -135,13 +135,13 @@ runs:
          completed: .run.completed,
          "run-time": "\(.run.completed - .run.started | . * 100 | round / 100)s",
          "job-time": "\(.run.completed - .context["job-started"] | . * 100 | round / 100)s"}
-  - uses: envoyproxy/toolshed/actions/json/table@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/json/table@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Run information summary
     id: run-summary
     with:
       json: ${{ steps.run-info.outputs.value }}
       title: Runtime information
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input: ${{ inputs.context }}
       options: -r
diff --git a/actions/foreach/action.yml b/actions/foreach/action.yml
index e4014ae52b..fc5e7b70c7 100644
--- a/actions/foreach/action.yml
+++ b/actions/foreach/action.yml
@@ -25,7 +25,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Context
     id: context
     with:
@@ -33,13 +33,13 @@ runs:
       filter: |
         ${{ inputs.context-filter }}
         | . * {"items": ${{ inputs.items }}}
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Steps (JSON)
     id: steps-json
     with:
       input: ${{ inputs.steps }}
       input-format: yaml
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Steps
     id: steps-subs
     with:
@@ -55,7 +55,7 @@ runs:
         | map(.key as $k | $out | . + [($steps | walk(if type == "string" then sub("\\$KEY"; "\($k)") else . end))])
         | flatten
 
-  - uses: envoyproxy/toolshed/actions/using/steps@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/using/steps@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: steps
     with:
       name: ${{ inputs.name }}
diff --git a/actions/gcp/setup/action.yml b/actions/gcp/setup/action.yml
index 5c666ebffc..39faf6666f 100644
--- a/actions/gcp/setup/action.yml
+++ b/actions/gcp/setup/action.yml
@@ -19,7 +19,7 @@ outputs:
 runs:
   using: "composite"
   steps:
-  - uses: envoyproxy/toolshed/actions/github/script/run@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/github/script/run@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: key
     if: ${{ inputs.key }}
     with:
diff --git a/actions/gcs/fuse/action.yml b/actions/gcs/fuse/action.yml
index ec96451a6d..2b5cbdf39e 100644
--- a/actions/gcs/fuse/action.yml
+++ b/actions/gcs/fuse/action.yml
@@ -131,7 +131,7 @@ runs:
           ARCH="arm64"
       fi
       echo "address=${GCSFUSE_DOWNLOAD_ROOT}/${GCSFUSE_VERSION}/gcsfuse_${GCSFUSE_VERSION#v}_${ARCH}.deb" >> $GITHUB_OUTPUT
-  - uses: envoyproxy/toolshed/actions/fetch@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/fetch@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Fetch gcsfuse
     if: ${{ steps.status.outputs.installed != 'true' }}
     with:
@@ -171,7 +171,7 @@ runs:
       echo "key-path=${KEY_PATH}" >> $GITHUB_OUTPUT
       echo "GOOGLE_APPLICATION_CREDENTIALS=${KEY_PATH}" >> $GITHUB_ENV
     shell: bash
-  - uses: envoyproxy/toolshed/actions/github/script/run@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/github/script/run@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Mount GCS bucket
     id: mount
     env:
@@ -232,7 +232,7 @@ runs:
       post: |
         rm -rf ${{ steps.sa.outputs.key-path }}
         ${AS_ROOT} fusermount -u "${{ inputs.mount-point }}" || true
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Parse mount
     with:
       input: ${{ steps.mount.outputs.output-path }}
diff --git a/actions/github/afterall/action.yml b/actions/github/afterall/action.yml
index b1fa1d122e..fb4cc24780 100644
--- a/actions/github/afterall/action.yml
+++ b/actions/github/afterall/action.yml
@@ -56,7 +56,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: workflows
     with:
       options: -sRc
@@ -65,7 +65,7 @@ runs:
         .
         | split("\n")
         | map(select(length > 0))
-  - uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: check-workflows
     env:
       GH_TOKEN: ${{ inputs.token }}
diff --git a/actions/github/artifact/cache/restore/action.yml b/actions/github/artifact/cache/restore/action.yml
index 8e9394707e..6ff8279d65 100644
--- a/actions/github/artifact/cache/restore/action.yml
+++ b/actions/github/artifact/cache/restore/action.yml
@@ -32,7 +32,7 @@ runs:
     if: >-
       ! inputs.id
     id: cache-id
-    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       name: ${{ inputs.name }}
       token: ${{ inputs.token }}
diff --git a/actions/github/caches/restore/action.yml b/actions/github/caches/restore/action.yml
index 1dee3cdd4f..f7c1a50285 100644
--- a/actions/github/caches/restore/action.yml
+++ b/actions/github/caches/restore/action.yml
@@ -10,7 +10,7 @@ outputs:
 runs:
   using: "composite"
   steps:
-  - uses: envoyproxy/toolshed/actions/foreach@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/foreach@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: json_actions
     with:
       items: ${{ inputs.caches }}
@@ -21,7 +21,7 @@ runs:
             key: $KEY
             path: "%{{ fromJSON(inputs.context).items['$KEY'] }}"
 
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: cached
     with:
       input: ${{ steps.json_actions.outputs.out }}
diff --git a/actions/github/caches/save/action.yml b/actions/github/caches/save/action.yml
index 441c27eb6b..a345a552ce 100644
--- a/actions/github/caches/save/action.yml
+++ b/actions/github/caches/save/action.yml
@@ -9,7 +9,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-  - uses: envoyproxy/toolshed/actions/foreach@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/foreach@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: json_actions
     with:
       items: ${{ inputs.caches }}
diff --git a/actions/github/checkout/action.yml b/actions/github/checkout/action.yml
index cd0c8edae2..f3b9b7b79b 100644
--- a/actions/github/checkout/action.yml
+++ b/actions/github/checkout/action.yml
@@ -79,7 +79,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/github/merge-commit@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/github/merge-commit@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: merge-commit
     name: Fetch merge commit hash
     if: ${{ inputs.pr != '' && fromJSON(inputs.fetch-merge-commit) }}
@@ -91,7 +91,7 @@ runs:
   # otherwise the config value is respected.
   - name: Parse YAML config
     id: parsed-config
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input: ${{ inputs.config || '{}' }}
       input-format: yaml
@@ -138,7 +138,7 @@ runs:
   - name: Config
     id: config-token
     if: ${{ inputs.ssh-key == '' }}
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input: ${{ inputs.token || github.token }}
       options: -R
@@ -151,7 +151,7 @@ runs:
         | del(.branch, .["requested-ref"])
   - name: Config
     id: config-ssh
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: ${{ inputs.ssh-key != '' }}
     with:
       input: ${{ inputs.ssh-key }}
@@ -190,7 +190,7 @@ runs:
       COMMITTER_EMAIL: ${{ inputs.committer-email }}
     shell: bash
   - id: branch
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input: ${{ fromJSON(steps.parsed-config.outputs.value).branch }}
       input-format: text
diff --git a/actions/github/command/action.yml b/actions/github/command/action.yml
index 13cb23a381..4c854b0ab2 100644
--- a/actions/github/command/action.yml
+++ b/actions/github/command/action.yml
@@ -17,7 +17,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Parse command from text
     id: command
     with:
diff --git a/actions/github/env/load/action.yml b/actions/github/env/load/action.yml
index c46f16205f..68394acf69 100644
--- a/actions/github/env/load/action.yml
+++ b/actions/github/env/load/action.yml
@@ -36,7 +36,7 @@ runs:
   using: composite
   steps:
   # For dispatch events we have to find the request via the Request workflow
-  - uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Find request
     id: find-request
     if: ${{ inputs.head-sha }}
@@ -47,7 +47,7 @@ runs:
         | ("${{ inputs.template-script-current }}" | bash::output)
   - name: Download environment data
     id: download
-    uses: envoyproxy/toolshed/actions/github/artifact/download@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/github/artifact/download@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       name: ${{ inputs.name }}
       path: ${{ runner.temp }}
@@ -55,7 +55,7 @@ runs:
 
   - name: Validate environment source
     if: ${{ github.event_name == 'workflow_run' }}
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input: |
         workflow_event: ${{ toJSON(github.event.workflow_run.event) }}
@@ -79,7 +79,7 @@ runs:
           else
             "✓ Environment source validation passed"
           end
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Load env data
     id: data
     with:
diff --git a/actions/github/env/save/action.yml b/actions/github/env/save/action.yml
index 623079f0ed..974ec0e22c 100644
--- a/actions/github/env/save/action.yml
+++ b/actions/github/env/save/action.yml
@@ -20,7 +20,7 @@ runs:
       # Create temporary directory
       OUTPUT_DIR=$(mktemp -d)
       echo "directory=${OUTPUT_DIR}" >> $GITHUB_OUTPUT
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Check proxy data
     id: env
     with:
diff --git a/actions/github/env/summary/action.yml b/actions/github/env/summary/action.yml
index e2dd5c477d..1dc2f9eb21 100644
--- a/actions/github/env/summary/action.yml
+++ b/actions/github/env/summary/action.yml
@@ -61,7 +61,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: linked-title
     with:
       input: |
@@ -76,7 +76,7 @@ runs:
       options: -r
       filter: gfm::event_title
 
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: title
     with:
       input: |
@@ -97,7 +97,7 @@ runs:
   # table configuration is maintainer-controlled (it is read from the target
   # branch). No user data is ever interpolated into a filter - it is passed as
   # data (`input`/`env`) instead.
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Table filter
     id: table-filter
     with:
@@ -108,7 +108,7 @@ runs:
       filter: |
         with_entries({key: .key, value: .value.filter})
         | utils::filters
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Tables
     id: tables
     with:
@@ -129,7 +129,7 @@ runs:
   # WARNING: `message` (PR title/body) and `actor` are user data. They are
   # passed to jq as data (`input`/`env`) and are never interpolated into the
   # filter, where they would be jq program text.
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: output
     env:
       SUMMARY_ACTOR: ${{ inputs.actor }}
@@ -173,7 +173,7 @@ runs:
         "
         | str::indent($inputs.indent // "0" | fromjson)
 
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: ${{ inputs.output-path }}
     env:
       SUMMARY_EVENT_NAME: ${{ inputs.event-name }}
diff --git a/actions/github/issue/get/action.yml b/actions/github/issue/get/action.yml
index 6dc7f55d36..d137f02f17 100644
--- a/actions/github/issue/get/action.yml
+++ b/actions/github/issue/get/action.yml
@@ -60,7 +60,7 @@ runs:
     shell: bash
     env:
       GH_TOKEN: "${{ inputs.GITHUB_TOKEN }}"
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: issue-id
     with:
       input: ${{ steps.issue-query.outputs.result }}
diff --git a/actions/github/merge-commit/action.yml b/actions/github/merge-commit/action.yml
index 64647f0210..fd4fe8322f 100644
--- a/actions/github/merge-commit/action.yml
+++ b/actions/github/merge-commit/action.yml
@@ -32,14 +32,14 @@ runs:
     shell: bash
     env:
       URL: https://api.github.com/repos/${{ inputs.repository }}/pulls/${{ inputs.pr }}
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: jq
     with:
       input: ${{ steps.fetch.outputs.response }}
       options: -r
       filter: |
         .merge_commit_sha // ""
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: ${{ ! steps.jq.outputs.value }}
     with:
       input: ${{ steps.fetch.outputs.response }}
diff --git a/actions/github/pr/action.yml b/actions/github/pr/action.yml
index 8de8b7654f..02183b1a99 100644
--- a/actions/github/pr/action.yml
+++ b/actions/github/pr/action.yml
@@ -59,7 +59,7 @@ runs:
   using: composite
   steps:
   - name: Checkout branch (${{ inputs.branch }})
-    uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     env:
       GH_TOKEN: ${{ inputs.GITHUB_TOKEN }}
       CI_DEBUG: true
@@ -91,7 +91,7 @@ runs:
         | "${{ inputs.template-create-pr }}"
 
   - name: Upload diff
-    uses: envoyproxy/toolshed/actions/upload/diff@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/upload/diff@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: ${{ inputs.diff-upload }}
     with:
       diff: HEAD^1
diff --git a/actions/github/release/action.yml b/actions/github/release/action.yml
index 0a49d9cbad..ffe47f5731 100644
--- a/actions/github/release/action.yml
+++ b/actions/github/release/action.yml
@@ -80,7 +80,7 @@ runs:
   steps:
   - name: Check release status
     id: status
-    uses: envoyproxy/toolshed/actions/github/release/status@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/github/release/status@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       name: ${{ inputs.name }}
       repository: ${{ inputs.repository }}
@@ -96,7 +96,7 @@ runs:
       && fromJSON(inputs.artifacts)
       && ! fromJSON(steps.status.outputs.version).is_dev
     name: Download artifacts from workflow runs
-    uses: envoyproxy/toolshed/actions/github/release/artifacts@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/github/release/artifacts@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       filter-artifacts: ${{ inputs.filter-artifacts }}
       gpg-fingerprint: ${{ inputs.gpg-fingerprint }}
@@ -109,7 +109,7 @@ runs:
     if: >-
       fromJSON(steps.status.outputs.continue)
       && ! fromJSON(steps.status.outputs.version).is_dev
-    uses: envoyproxy/toolshed/actions/github/release/publish@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/github/release/publish@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       assets: ${{ fromJSON(inputs.artifacts) && format('{0}/*', inputs.publish-directory) || '' }}
       branch: ${{ inputs.branch }}
diff --git a/actions/github/release/artifacts/action.yml b/actions/github/release/artifacts/action.yml
index 1fe3de1e8b..f3a43f70c3 100644
--- a/actions/github/release/artifacts/action.yml
+++ b/actions/github/release/artifacts/action.yml
@@ -45,7 +45,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Generate download config
     id: download-config
     with:
@@ -64,7 +64,7 @@ runs:
                  name: $name,
                  run_id: $run_ids[.]}})
         | from_entries
-  - uses: envoyproxy/toolshed/actions/foreach@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/foreach@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: steps.download-config.outputs.value
     with:
       items: ${{ steps.download-config.outputs.value }}
@@ -84,7 +84,7 @@ runs:
   - name: List downloaded artifacts
     id: artifacts
     if: steps.download-config.outputs.value
-    uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       catch-errors: true
       input: |
@@ -112,7 +112,7 @@ runs:
     if: >-
       steps.artifacts.outputs.output != ''
       && steps.artifacts.outputs.output != '{}'
-    uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input: |
         artifacts: ${{ steps.artifacts.outputs.output }}
@@ -129,14 +129,14 @@ runs:
     if: >-
       steps.artifacts.outputs.output != ''
       && steps.artifacts.outputs.output != '{}'
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input: ${{ steps.artifacts.outputs.output }}
   - name: Generate workflow artifacts table
     if: >-
       steps.artifacts.outputs.output != ''
       && steps.artifacts.outputs.output != '{}'
-    uses: envoyproxy/toolshed/actions/json/table@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/json/table@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       title: Artifacts to publish
       append: true
@@ -168,7 +168,7 @@ runs:
       steps.artifacts.outputs.output != '{}'
       && steps.artifacts.outputs.output != ''
       && inputs.gpg-fingerprint != ''
-    uses: envoyproxy/toolshed/actions/gpg/sign@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/gpg/sign@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       debug: ${{ inputs.debug }}
       fingerprint: ${{ inputs.gpg-fingerprint }}
diff --git a/actions/github/release/latest/action.yml b/actions/github/release/latest/action.yml
index 7df34413da..ea52da3257 100644
--- a/actions/github/release/latest/action.yml
+++ b/actions/github/release/latest/action.yml
@@ -36,7 +36,7 @@ runs:
   using: composite
   steps:
   - id: latest
-    uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input: |
         repo: ${{ inputs.repository }}
diff --git a/actions/github/release/publish/action.yml b/actions/github/release/publish/action.yml
index 47b2afad33..b0672cca88 100644
--- a/actions/github/release/publish/action.yml
+++ b/actions/github/release/publish/action.yml
@@ -71,7 +71,7 @@ inputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: >-
       inputs.assets
     id: assets
@@ -83,7 +83,7 @@ runs:
         .
         | split("\n")
         | join(" ")
-  - uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: release
     env:
       GH_TOKEN: ${{ inputs.token }}
@@ -123,7 +123,7 @@ runs:
           && '(dry-run)'
           || ''  }}
     if: fromJSON(inputs.summary)
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input: |
         result: ${{ steps.release.outputs.output || '[]' }}
diff --git a/actions/github/release/shas/action.yml b/actions/github/release/shas/action.yml
index 37b7648716..0544dbe4e9 100644
--- a/actions/github/release/shas/action.yml
+++ b/actions/github/release/shas/action.yml
@@ -24,7 +24,7 @@ runs:
   using: composite
   steps:
   - id: filtered-assets
-    uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input: |
         tag: ${{ inputs.tag }}
diff --git a/actions/github/release/status/action.yml b/actions/github/release/status/action.yml
index 8b5424ba98..08350642c6 100644
--- a/actions/github/release/status/action.yml
+++ b/actions/github/release/status/action.yml
@@ -42,20 +42,20 @@ runs:
   steps:
   - name: Check all workflows ran
     id: afterall
-    uses: envoyproxy/toolshed/actions/github/afterall@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/github/afterall@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       sha: ${{ inputs.sha }}
       workflows: ${{ inputs.workflows }}
       repo: ${{ inputs.repository }}
   - name: Version info
     id: version
-    uses: envoyproxy/toolshed/actions/version@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/version@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       version: ${{ inputs.version }}
       version-file: ${{ inputs.version-file }}
   - name: Status summary title
     id: status-summary-title
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       input: |
         name: ${{ inputs.name }}
@@ -72,7 +72,7 @@ runs:
            end) as $release_info
         | "${{ inputs.template-status }}"
   - name: Versions info
-    uses: envoyproxy/toolshed/actions/json/table@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/json/table@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       append: true
       output-path: GITHUB_STEP_SUMMARY
@@ -97,7 +97,7 @@ runs:
             "continue": .continue,
           }
   - name: Generate workflow status table
-    uses: envoyproxy/toolshed/actions/json/table@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/json/table@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       title: Required Workflows Status
       append: true
diff --git a/actions/github/run/action.yml b/actions/github/run/action.yml
index 7851d288d7..89f107bf87 100644
--- a/actions/github/run/action.yml
+++ b/actions/github/run/action.yml
@@ -134,10 +134,10 @@ runs:
   steps:
   - if: ${{ fromJSON(inputs.diskspace-hack) }}
     name: Free diskspace
-    uses: envoyproxy/toolshed/actions/diskspace@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/diskspace@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       to_remove: ${{ inputs.diskspace-hack-paths }}
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Generate download config
     if: ${{ inputs.downloads }}
     id: download-config
@@ -154,7 +154,7 @@ runs:
              else
                "${{ runner.temp }}/\(.)"
              end)
-  - uses: envoyproxy/toolshed/actions/foreach@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/foreach@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: ${{ steps.download-config.outputs.value }}
     with:
       items: ${{ steps.download-config.outputs.value }}
@@ -197,7 +197,7 @@ runs:
       OUTPUT_DATA: ${{ inputs.output-path }}
     shell: bash
 
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: entrypoint
     with:
       input: |
@@ -207,7 +207,7 @@ runs:
       output-path: ${{ steps.paths.outputs.entrypoint }}
       print-output: ${{ fromJSON(env.CI_DEBUG || 'false') && true || false }}
 
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: source
     with:
       input: |
@@ -216,27 +216,27 @@ runs:
       options: -Rsr
       output-path: ${{ steps.paths.outputs.source }}
       print-output: ${{ fromJSON(env.CI_DEBUG || 'false') && true || false }}
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Generate run context (steps-pre)
     id: context-steps-pre
     with:
       input: ${{ inputs.steps-pre || '""' }}
       options: -Rs
       input-format: string
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Generate run context (steps-post)
     id: context-steps-post
     with:
       input: ${{ inputs.steps-post || '""' }}
       options: -Rs
       input-format: string
-  - uses: envoyproxy/toolshed/actions/using/steps@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/using/steps@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Pre report
     if: ${{ inputs.report-pre }}
     with:
       steps: ${{ inputs.report-pre }}
       context: ${{ inputs.context }}
-  - uses: envoyproxy/toolshed/actions/using/steps@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/using/steps@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Run pre steps
     if: ${{ inputs.steps-pre }}
     with:
@@ -285,7 +285,7 @@ runs:
       CONTAINER_COMMAND_INPUT: ${{ inputs.container-command }}
       ENVSUBST_VARS: ${{ inputs.envsubst-vars }}
 
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: ${{ always() }}
     id: started
     with:
@@ -335,21 +335,21 @@ runs:
     env:
       COMMAND: ${{ steps.command.outputs.command }}
       TARGET_PATH: ${{ inputs.working-directory }}
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: cancelled
     if: ${{ cancelled() }}
     with:
       options: -r
       filter: |
         true
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: ${{ always() }}
     id: completed
     with:
       options: -r
       filter: now
 
-  - uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: ${{ ! (cancelled() || fromJSON(steps.cancelled.outputs.value || 'false')) }}
     with:
       input-format: string-path
@@ -368,7 +368,7 @@ runs:
              error: $error_match,
              fail: $fail_match})
 
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Generate run context
     id: context
     if: ${{ always() }}
@@ -389,7 +389,7 @@ runs:
         | {"run": .,
            "context": ${{ inputs.context || '{}' }}}
 
-  - uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: ${{ inputs.container-output && ( ! (cancelled() || fromJSON(steps.cancelled.outputs.value || 'false'))) }}
     with:
       input: |
@@ -409,27 +409,27 @@ runs:
               | "\($dir)/\($v)" as $target
               | "mkdir -p $(dirname \($dir_target))\n\(env.CONTAINER_COMMAND) cp -a \($k) \($target)")
         | join("\n")
-  - uses: envoyproxy/toolshed/actions/using/steps@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/using/steps@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Run post steps
     if: ${{ inputs.steps-post && ! (fromJSON(steps.context.outputs.value).run.cancelled || cancelled()) }}
     with:
       name: ${{ inputs.steps-post-name }}
       steps: ${{ inputs.steps-post }}
       context: ${{ steps.context.outputs.value }}
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: post-failed
     if: ${{ failure() && inputs.uploads }}
     with:
       input: ${{ steps.context.outputs.value }}
       filter: |
         .run["post-steps-failed"] = true
-  - uses: envoyproxy/toolshed/actions/using/steps@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/using/steps@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Post report
     if: ${{ inputs.report-post && ! (fromJSON(steps.context.outputs.value).run.cancelled || cancelled()) }}
     with:
       steps: ${{ inputs.report-post }}
       context: ${{ steps.context.outputs.value }}
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Generate upload config
     id: upload-config
     if: ${{ inputs.uploads && ! (fromJSON(steps.context.outputs.value).run.cancelled || cancelled()) }}
@@ -446,7 +446,7 @@ runs:
                else
                  "${{ runner.temp }}/\(.)"
                end)
-  - uses: envoyproxy/toolshed/actions/foreach@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/foreach@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: ${{ steps.upload-config.outputs.value }}
     with:
       items: ${{ steps.upload-config.outputs.value }}
@@ -458,21 +458,21 @@ runs:
               %{{ fromJSON(inputs.context).items['$KEY'].path }}
             if-no-files-found: >-
               %{{ fromJSON(inputs.context).items['$KEY']['if-no-files-found'] || 'warn' }}
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: upload-failed
     if: ${{ failure() && inputs.uploads }}
     with:
       input: ${{ steps.post-failed.outputs.value || steps.context.outputs.value }}
       filter: |
         .run["upload-failed"] = true
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: run-cancelled
     if: ${{ cancelled() }}
     with:
       input: ${{ steps.post-failed.outputs.value || steps.context.outputs.value }}
       filter: |
         .run["cancelled"] = true
-  - uses: envoyproxy/toolshed/actions/using/steps@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/using/steps@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Job summary
     if: ${{ always() && inputs.summary-post }}
     with:
diff --git a/actions/github/should-run/action.yml b/actions/github/should-run/action.yml
index 5311757a3d..40cf56c386 100644
--- a/actions/github/should-run/action.yml
+++ b/actions/github/should-run/action.yml
@@ -41,7 +41,7 @@ runs:
     if: inputs.checkout-repo
     with:
       fetch-depth: 0
-  - uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: changed
     with:
       input: |
@@ -59,20 +59,20 @@ runs:
       result-filter: |
         rtrimstr("\n")
         | split("\n")
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: config
     with:
       input: ${{ inputs.config }}
       input-format: yaml
       filter: |
         {"check": .}
-  - uses: envoyproxy/toolshed/actions/torun@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/torun@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: torun
     with:
       event: ${{ inputs.event }}
       paths: ${{ steps.changed.outputs.output }}
       config: ${{ steps.config.outputs.value }}
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: check
     with:
       input: ${{ steps.torun.outputs.runs }}
diff --git a/actions/gpg/action.yml b/actions/gpg/action.yml
index c2a34a0a19..7235f3321a 100644
--- a/actions/gpg/action.yml
+++ b/actions/gpg/action.yml
@@ -29,14 +29,14 @@ runs:
     id: gpg
     if: >-
       inputs.gpg-key == ''
-    uses: envoyproxy/toolshed/actions/gpg/generate@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/gpg/generate@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       debug: ${{ inputs.debug }}
   - name: Import GPG key
     id: gpg-import
     if: >-
       inputs.gpg-key != ''
-    uses: envoyproxy/toolshed/actions/gpg/import@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/gpg/import@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       key: ${{ inputs.gpg-key }}
       passphrase: ${{ inputs.gpg-password }}
diff --git a/actions/gpg/import/action.yml b/actions/gpg/import/action.yml
index 818d41a466..4ac9693415 100644
--- a/actions/gpg/import/action.yml
+++ b/actions/gpg/import/action.yml
@@ -25,7 +25,7 @@ runs:
       gpg_private_key: ${{ inputs.key }}
       passphrase: ${{ inputs.passphrase }}
 
-  - uses: envoyproxy/toolshed/actions/github/script/run@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/github/script/run@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     if: ${{ inputs.passphrase && inputs.passphrase-path }}
     with:
       run: |
diff --git a/actions/gpg/write/README.md b/actions/gpg/write/README.md
index 70881c322d..e6508861d0 100644
--- a/actions/gpg/write/README.md
+++ b/actions/gpg/write/README.md
@@ -4,7 +4,7 @@ Write an encrypted OpenPGP secret key and passphrase to host files for Bazel
 `@envoy_toolshed//pgp` signing, and remove them in a post step.
 
 ```yaml
-- uses: envoyproxy/toolshed/actions/gpg/write@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+- uses: envoyproxy/toolshed/actions/gpg/write@a76c2dca927b8ca922d0e76d5d637d604e6851c9
   id: signing
   with:
     key: ${{ secrets.GPG_KEY }}
diff --git a/actions/gpg/write/action.yml b/actions/gpg/write/action.yml
index cb63ee7944..147e2370e4 100644
--- a/actions/gpg/write/action.yml
+++ b/actions/gpg/write/action.yml
@@ -50,7 +50,7 @@ runs:
   using: composite
   steps:
   - id: write
-    uses: envoyproxy/toolshed/actions/github/script/run@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/github/script/run@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     env:
       KEY: ${{ inputs.key }}
       PASSPHRASE: ${{ inputs.passphrase }}
diff --git a/actions/json/table/action.yml b/actions/json/table/action.yml
index 9d0dcb93b8..7b577ed74f 100644
--- a/actions/json/table/action.yml
+++ b/actions/json/table/action.yml
@@ -90,7 +90,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     name: Generate table
     id: table
     with:
@@ -109,7 +109,7 @@ runs:
                      ${{ inputs.mutate-cells || '.cell' }};
                      ${{ inputs.sanitize-filter || '.' }})
 
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: summary
     if: ${{ steps.table.outputs.value }}
     with:
diff --git a/actions/oci/collector/action.yml b/actions/oci/collector/action.yml
index 072de5c363..f58a8b4d8c 100644
--- a/actions/oci/collector/action.yml
+++ b/actions/oci/collector/action.yml
@@ -109,7 +109,7 @@ runs:
       ls -la ${{ inputs.oci-tmp-path }}
       echo "::endgroup::"
   - name: Buildah operations
-    uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: operations
     with:
       input: |
@@ -146,7 +146,7 @@ runs:
                args: ["push", "--all", $manifest_name, "docker://\($additional_tag)"],
                metadata: {tag: $additional_tag}})]
   - name: Execute buildah operations
-    uses: envoyproxy/toolshed/actions/buildah@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/buildah@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: buildah
     with:
       operations: ${{ steps.operations.outputs.value }}
diff --git a/actions/regctl/install/action.yml b/actions/regctl/install/action.yml
index cee7db27dc..45d52991ed 100644
--- a/actions/regctl/install/action.yml
+++ b/actions/regctl/install/action.yml
@@ -19,7 +19,7 @@ runs:
   using: 'composite'
   steps:
   - name: Fetch regctl
-    uses: envoyproxy/toolshed/actions/fetch@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/fetch@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     with:
       url: https://github.com/regclient/regclient/releases/download/${{ inputs.version }}/regctl-linux-${{ inputs.arch }}
       path: /tmp/regctl
diff --git a/actions/source/action.yml b/actions/source/action.yml
index 8506a08b05..ca97e39e39 100644
--- a/actions/source/action.yml
+++ b/actions/source/action.yml
@@ -46,7 +46,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: create-tarball
     env:
       SOURCE_ACTION_PATH: ${{ github.action_path }}
diff --git a/actions/test-runner/action.yml b/actions/test-runner/action.yml
index 9f5257c0d8..543f6e7e57 100644
--- a/actions/test-runner/action.yml
+++ b/actions/test-runner/action.yml
@@ -25,7 +25,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: config
     with:
       input: ${{ inputs.config }}
@@ -50,7 +50,7 @@ runs:
       MOCK_LOG="$(mktemp)"
       echo "MOCK_LOG=${MOCK_LOG}" >> "$GITHUB_ENV"
       echo "${ACTION_TEST_PATH}/mocks:$PATH" >> $GITHUB_PATH
-  - uses: envoyproxy/toolshed/actions/using/steps@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/using/steps@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: run
     with:
       name: Run test
diff --git a/actions/test-runner/tests/test-runner.test.yml b/actions/test-runner/tests/test-runner.test.yml
index 8efe1aeadb..1abad3c89d 100644
--- a/actions/test-runner/tests/test-runner.test.yml
+++ b/actions/test-runner/tests/test-runner.test.yml
@@ -6,7 +6,7 @@ before:
 - shell: bash
   run: |
     mkdir -p /tmp/testfiles
-- uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+- uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
   id: before
   with:
     input-format: yaml
@@ -17,7 +17,7 @@ before:
         run: |
           echo "BEFORE" >> /tmp/test-output
           mkdir /tmp/DELETEME
-      uses: envoyproxy/toolshed/actions/diskspace@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+      uses: envoyproxy/toolshed/actions/diskspace@a76c2dca927b8ca922d0e76d5d637d604e6851c9
       with:
         background: false
         to_remove: |
diff --git a/actions/using/recurse/action.yml b/actions/using/recurse/action.yml
index 091a7b94df..24d0a7538b 100644
--- a/actions/using/recurse/action.yml
+++ b/actions/using/recurse/action.yml
@@ -11,7 +11,7 @@ runs:
   steps:
   # .tmp.action/action.yml **must** be hardcoded
 
-  - uses: envoyproxy/toolshed/actions/jq@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+  - uses: envoyproxy/toolshed/actions/jq@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     id: yaml
     with:
       input: ${{ inputs.with }}
diff --git a/actions/version/action.yml b/actions/version/action.yml
index 135e822957..96dd54a177 100644
--- a/actions/version/action.yml
+++ b/actions/version/action.yml
@@ -27,7 +27,7 @@ runs:
   using: composite
   steps:
   - id: version
-    uses: envoyproxy/toolshed/actions/bson@d850cc271c9d0631028b27e87c41d2f5d6540ee1
+    uses: envoyproxy/toolshed/actions/bson@a76c2dca927b8ca922d0e76d5d637d604e6851c9
     env:
       VERSION: ${{ inputs.version }}
       VERSION_FILE: ${{ inputs.version-file }}