diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..71e90681c
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,8 @@
+version: 2
+updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      # Check for updates to GitHub Actions every month
+      interval: "monthly"
diff --git a/.github/workflows/cache_cleaner.yml b/.github/workflows/cache_cleaner.yml
index fc732435b..67faba331 100644
--- a/.github/workflows/cache_cleaner.yml
+++ b/.github/workflows/cache_cleaner.yml
@@ -13,7 +13,7 @@ jobs:
     permissions:
       actions: write
     steps:
-      - uses: yumemi-inc/clean-cache-action@v1
+      - uses: yumemi-inc/clean-cache-action@v1.0.5
         with:
           ref: 'refs/heads/${{ github.head_ref }}'
   clean_PR_artifacts:
diff --git a/.github/workflows/image-builder-from-repo.yml b/.github/workflows/image-builder-from-repo.yml
index 0c8060604..95aaa612a 100644
--- a/.github/workflows/image-builder-from-repo.yml
+++ b/.github/workflows/image-builder-from-repo.yml
@@ -22,7 +22,7 @@ jobs:
         sudo apt install coreutils p7zip-full qemu-user-static xz-utils
 
     - name: Checkout CustomPiOS
-      uses: actions/checkout@v4
+      uses: actions/checkout@v4.1.7
       with:
         repository: 'guysoft/CustomPiOS'
         ref: '${{ github.event.inputs.tagCustomPiOS }}'
@@ -99,7 +99,7 @@ jobs:
         echo "image=$IMAGE" >> $GITHUB_OUTPUT
 
     # artifact upload will take care of zipping for us
-    - uses: actions/upload-artifact@v4
+    - uses: actions/upload-artifact@v4.3.4
       with:
         name: ${{ steps.copy.outputs.image }}
         path: ${{ steps.copy.outputs.image }}.img.xz
diff --git a/.github/workflows/image-builder.yml b/.github/workflows/image-builder.yml
index c927b2085..4ba019fda 100644
--- a/.github/workflows/image-builder.yml
+++ b/.github/workflows/image-builder.yml
@@ -38,7 +38,7 @@ jobs:
         sudo apt install coreutils p7zip-full qemu-user-static
 
     - name: Checkout CustomPiOS
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4.1.7
       with:
         repository: 'guysoft/CustomPiOS'
         path: CustomPiOS
@@ -121,7 +121,7 @@ jobs:
         echo "image=$IMAGE" >> $GITHUB_OUTPUT
 
     # artifact upload will take care of zipping for us
-    - uses: actions/upload-artifact@v3
+    - uses: actions/upload-artifact@v4.3.4
       with:
         name: ${{ steps.copy.outputs.image }}
         path: ${{ steps.copy.outputs.image }}.img
diff --git a/.github/workflows/push-master.yml b/.github/workflows/push-master.yml
index 0ef921bd8..fc0f969f7 100644
--- a/.github/workflows/push-master.yml
+++ b/.github/workflows/push-master.yml
@@ -67,7 +67,7 @@ jobs:
             platform: linux
     steps:
       # checkout
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.7
         with:
           submodules: true
 
@@ -83,7 +83,7 @@ jobs:
        # download cache
       - name: Download ccache files
         if: env.USE_CACHE == 'true'
-        uses: actions/cache@v4
+        uses: actions/cache@v4.0.2
         with:
            path: .ccache
            key: ${{ matrix.linuxVersion }}-${{ matrix.dockerImage }}-ccache-${{ steps.ccache_cache_timestamp.outputs.timestamp }}
@@ -115,7 +115,7 @@ jobs:
       # Upload artifacts (only on tagged commit)
       - name: Upload artifacts
         if: startsWith(github.event.ref, 'refs/tags') && github.event_name != 'pull_request'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v4.3.4
         with:
           name: release-artifact-${{ matrix.linuxVersion }}-${{ matrix.dockerImage }}
           path: deploy/Hyper*
@@ -123,7 +123,7 @@ jobs:
       # Upload artifacts from commit
       - name: Upload artifacts from commit
         if: (startsWith(github.event.ref, 'refs/tags') != true) && github.event_name != 'pull_request'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v4.3.4
         with:
           name: Linux-${{ matrix.linuxVersion }}-${{ matrix.dockerImage }}-installer
           path: |
@@ -151,7 +151,7 @@ jobs:
             NICE_NAME: x64
     steps:
       # Checkout
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.7
         with:
             submodules: true
 
@@ -167,7 +167,7 @@ jobs:
       # Download cache
       - name: Download ccache files
         if: env.USE_CACHE == 'true'
-        uses: actions/cache@v4
+        uses: actions/cache@v4.0.2
         with:
             path: build/.ccache
             key: macOS-ccache-${{ matrix.NICE_NAME }}-${{ steps.ccache_cache_timestamp.outputs.timestamp }}
@@ -204,7 +204,7 @@ jobs:
       # Upload artifacts (only on tagged commit)
       - name: Upload artifacts
         if: startsWith(github.event.ref, 'refs/tags') && github.event_name != 'pull_request'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v4.3.4
         with:
             name: release-artifact-${{ matrix.JOB_RUNNER }}      
             path: build/Hyper*.dmg
@@ -212,7 +212,7 @@ jobs:
       # Upload artifacts from commit
       - name: Upload artifacts from commit
         if: (startsWith(github.event.ref, 'refs/tags') != true) && github.event_name != 'pull_request'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v4.3.4
         with:
             name: Apple_macOS_${{ matrix.NICE_NAME }}_DMG_installer
             path: build/Hyper*.dmg
@@ -229,12 +229,12 @@ jobs:
       QT_VERSION: 6.5.3
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.1.7
         with:
           submodules: true
 
       - name: Cache Qt
-        uses: actions/cache@v4
+        uses: actions/cache@v4.0.2
         id: cache-qt-windows
         with:
           path: ${{ runner.workspace }}/Qt
@@ -258,7 +258,7 @@ jobs:
       # Download cache
       - name: Download ccache files
         if: env.USE_CACHE == 'true'
-        uses: actions/cache@v4
+        uses: actions/cache@v4.0.2
         with:
             path: build/.ccache
             key: ${{ runner.os }}-ccache-${{ steps.ccache_cache_timestamp.outputs.timestamp }}
@@ -303,7 +303,7 @@ jobs:
       # Upload artifacts (only on tagged commit)
       - name: Upload artifacts
         if: startsWith(github.event.ref, 'refs/tags') && github.event_name != 'pull_request'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v4.3.4
         with:
           name: release-artifact-windows
           path: build/Hyper*
@@ -311,7 +311,7 @@ jobs:
       # Upload artifacts from commit
       - name: Upload artifacts from commit
         if: (startsWith(github.event.ref, 'refs/tags') != true) && github.event_name != 'pull_request'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v4.3.4
         with:
           name: Windows_x64_setup
           path: build/Hyper*.exe
@@ -337,7 +337,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.1.7
         if: env.USE_CODEQL == 'true'
         with:
           submodules: true
@@ -361,7 +361,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.1.7
 
       # generate environment variables
       - name: Generate environment variables from version and tag
@@ -377,7 +377,7 @@ jobs:
 
       # Download artifacts from previous build process
       - name: Download artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v4.1.8
         with:
           path: artifacts
           pattern: release-artifact-*
@@ -385,7 +385,7 @@ jobs:
 
       # create draft release and upload artifacts
       - name: Create draft release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2.0.8
         with:
           name: HyperHDR ${{ env.VERSION }}
           tag_name: ${{ env.TAG }}
diff --git a/.github/workflows/upload-to-github-pages.yml b/.github/workflows/upload-to-github-pages.yml
index 3e9b36964..9bc397c03 100644
--- a/.github/workflows/upload-to-github-pages.yml
+++ b/.github/workflows/upload-to-github-pages.yml
@@ -62,7 +62,7 @@ jobs:
 
     steps:
       # checkout
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.7
         with:
           submodules: true      
 
@@ -78,7 +78,7 @@ jobs:
        # download cache
       - name: ccache cache files
         if: ( env.USE_CACHE == '1' )
-        uses: actions/cache@v4
+        uses: actions/cache@v4.0.2
         with:
            path: .ccache
            key: ${{ matrix.linuxVersion }}-${{ matrix.dockerImage }}-ccache-${{ steps.ccache_cache_timestamp.outputs.timestamp }}
@@ -112,7 +112,7 @@ jobs:
           rm -r repo/pool/ArchLinux ||: 
 
       - name: Upload artifacts from commit        
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v4.3.4
         with:
           name: release-artifact-${{ matrix.linuxVersion }}-${{ matrix.dockerImage }}  
           path: repo
@@ -124,11 +124,11 @@ jobs:
 
     steps:
       # Download artifacts from previous build process
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.7
         with:
           submodules: false
       - name: Download artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v4.1.8
         with:
           path: repo
           pattern: release-artifact-*
@@ -136,7 +136,7 @@ jobs:
       - name: Display structure of artifacts
         run: ls -R repo
       - name: Deploy the packages
-        uses: JamesIves/github-pages-deploy-action@v4
+        uses: JamesIves/github-pages-deploy-action@v4.6.3
         with:
           repository-name: awawa-dev/awawa-dev.github.io
           branch: upload
diff --git a/external/flatbuffers b/external/flatbuffers
index 0100f6a57..595bf0007 160000
--- a/external/flatbuffers
+++ b/external/flatbuffers
@@ -1 +1 @@
-Subproject commit 0100f6a5779831fa7a651e4b67ef389a8752bd9b
+Subproject commit 595bf0007ab1929570c7671f091313c8fc20644e