diff --git a/.github/workflows/a11y-check.yml b/.github/workflows/a11y-check.yml
index a30c260e..33f0c5c3 100644
--- a/.github/workflows/a11y-check.yml
+++ b/.github/workflows/a11y-check.yml
@@ -22,7 +22,7 @@ jobs:
         run: git submodule update --init --depth=1
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.13"
           cache: pip
diff --git a/.github/workflows/anchor-check.yml b/.github/workflows/anchor-check.yml
index 2e6742b3..763e2d73 100644
--- a/.github/workflows/anchor-check.yml
+++ b/.github/workflows/anchor-check.yml
@@ -20,7 +20,7 @@ jobs:
       - name: Initialize submodules
         run: git submodule update --init --depth=1
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.13"
           cache: pip
diff --git a/.github/workflows/canonical-check.yml b/.github/workflows/canonical-check.yml
index 87dac15b..5a4cf697 100644
--- a/.github/workflows/canonical-check.yml
+++ b/.github/workflows/canonical-check.yml
@@ -22,7 +22,7 @@ jobs:
         run: git submodule update --init --depth=1
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.13"
           cache: pip
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index aeb35eeb..494315ff 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -25,7 +25,7 @@ jobs:
         run: git submodule update --init --depth=1
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.13"
           cache: pip
diff --git a/.github/workflows/description-check.yml b/.github/workflows/description-check.yml
index 5e5658e8..81dad89e 100644
--- a/.github/workflows/description-check.yml
+++ b/.github/workflows/description-check.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 1
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.13"
 
diff --git a/.github/workflows/em-dash-check.yml b/.github/workflows/em-dash-check.yml
index d83f79ca..e4bb3d08 100644
--- a/.github/workflows/em-dash-check.yml
+++ b/.github/workflows/em-dash-check.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 1
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.13"
 
diff --git a/.github/workflows/image-alt-check.yml b/.github/workflows/image-alt-check.yml
index 1a1fb69c..d82a2c45 100644
--- a/.github/workflows/image-alt-check.yml
+++ b/.github/workflows/image-alt-check.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 1
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.13"
 
diff --git a/.github/workflows/image-budget.yml b/.github/workflows/image-budget.yml
index b1517492..20e5db1c 100644
--- a/.github/workflows/image-budget.yml
+++ b/.github/workflows/image-budget.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 1
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.13"
 
diff --git a/.github/workflows/lighthouse.yml b/.github/workflows/lighthouse.yml
index 24f651f9..73d46672 100644
--- a/.github/workflows/lighthouse.yml
+++ b/.github/workflows/lighthouse.yml
@@ -34,7 +34,7 @@ jobs:
         run: git submodule update --init --depth=1
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.13"
           cache: pip
diff --git a/.github/workflows/link-graph-check.yml b/.github/workflows/link-graph-check.yml
index 0702234d..de6815c4 100644
--- a/.github/workflows/link-graph-check.yml
+++ b/.github/workflows/link-graph-check.yml
@@ -20,7 +20,7 @@ jobs:
       - name: Initialize submodules
         run: git submodule update --init --depth=1
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.13"
           cache: pip
diff --git a/.github/workflows/paradigm-shift-check.yml b/.github/workflows/paradigm-shift-check.yml
index 8e9530ee..6453cd4d 100644
--- a/.github/workflows/paradigm-shift-check.yml
+++ b/.github/workflows/paradigm-shift-check.yml
@@ -23,7 +23,7 @@ jobs:
           fetch-depth: 1
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.13"
 
diff --git a/.github/workflows/section-divider-check.yml b/.github/workflows/section-divider-check.yml
index b6886722..a719aaeb 100644
--- a/.github/workflows/section-divider-check.yml
+++ b/.github/workflows/section-divider-check.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 1
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.13"
 
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index b4bba164..702562f8 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-python@v7
+      - uses: actions/setup-python@v7.1.0
         with:
           python-version: '3.12'
       - name: Run test suite
diff --git a/.github/workflows/wellknown-check.yml b/.github/workflows/wellknown-check.yml
index 50317c22..03a73a3a 100644
--- a/.github/workflows/wellknown-check.yml
+++ b/.github/workflows/wellknown-check.yml
@@ -20,7 +20,7 @@ jobs:
       - name: Initialize submodules
         run: git submodule update --init --depth=1
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.13"
           cache: pip