diff --git a/.github/actions/test-flavor/action.yaml b/.github/actions/test-flavor/action.yaml
index 93e652ea..4d53ff40 100644
--- a/.github/actions/test-flavor/action.yaml
+++ b/.github/actions/test-flavor/action.yaml
@@ -16,7 +16,7 @@ runs:
     # === FLAVOR TESTING ===
 
     - name: Checkout repository
-      uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
         fetch-depth: 0
 
diff --git a/.github/workflows/callable-commitlint.yaml b/.github/workflows/callable-commitlint.yaml
index 818e722c..5a02e51c 100644
--- a/.github/workflows/callable-commitlint.yaml
+++ b/.github/workflows/callable-commitlint.yaml
@@ -27,12 +27,12 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
 
       - name: Setup Node.js
-        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
 
       - name: Install commitlint
         run: |
diff --git a/.github/workflows/callable-lint.yaml b/.github/workflows/callable-lint.yaml
index bf191bec..9270359d 100644
--- a/.github/workflows/callable-lint.yaml
+++ b/.github/workflows/callable-lint.yaml
@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/callable-publish.yaml b/.github/workflows/callable-publish.yaml
index ab8441dd..2beea904 100644
--- a/.github/workflows/callable-publish.yaml
+++ b/.github/workflows/callable-publish.yaml
@@ -43,7 +43,7 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Install UDS CLI
         uses: defenseunicorns/setup-uds@b987a32bac3baeb67bfb08f5e1544e2f9076ee8a # v1.0.0
diff --git a/.github/workflows/callable-scorecard.yaml b/.github/workflows/callable-scorecard.yaml
index c4c20d2c..08bb2e4a 100644
--- a/.github/workflows/callable-scorecard.yaml
+++ b/.github/workflows/callable-scorecard.yaml
@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/callable-test.yaml b/.github/workflows/callable-test.yaml
index eeaca5fe..aef745a3 100644
--- a/.github/workflows/callable-test.yaml
+++ b/.github/workflows/callable-test.yaml
@@ -52,7 +52,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/common-checks.yaml b/.github/workflows/common-checks.yaml
index c0066bd8..52f94e3f 100644
--- a/.github/workflows/common-checks.yaml
+++ b/.github/workflows/common-checks.yaml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index e328f6e2..b3697f44 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -42,7 +42,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: test-flavor
         uses: ./.github/actions/test-flavor
diff --git a/tasks/README.md b/tasks/README.md
index 58fc5384..f4b95611 100644
--- a/tasks/README.md
+++ b/tasks/README.md
@@ -14,7 +14,7 @@ Pinning to a specific tag of a task (rather than `main`) with renovate watching
 - UDS CLI: 0.18.0
 - UDS Core: 0.29.1
 - K3D: 5.7.4
-- Lula: 0.9.1
+- Lula: 0.10.0
 
 > [!NOTE]
 > Zarf is not required for tasks in this repo, the vendored zarf (`uds zarf`) included with UDS CLI is used instead to prevent version mismatches.
diff --git a/tasks/actions.yaml b/tasks/actions.yaml
index 34491b79..145a2661 100644
--- a/tasks/actions.yaml
+++ b/tasks/actions.yaml
@@ -119,7 +119,7 @@ tasks:
       - description: Install Lula
         env:
           # renovate: datasource=github-tags depName=defenseunicorns/lula versioning=semver-coerced
-          - LULA_VERSION=v0.9.1
+          - LULA_VERSION=v0.10.0
         cmd: |
           curl -o /usr/local/bin/lula -L \
           "https://github.com/defenseunicorns/lula/releases/download/${LULA_VERSION}/lula_${LULA_VERSION}_$(uname -s)_${{ .variables.ARCH }}" \