diff --git a/.github/workflows/cache-cleanup-on-merge.yml b/.github/workflows/cache-cleanup-on-merge.yml
index b554e8539..74fa19366 100644
--- a/.github/workflows/cache-cleanup-on-merge.yml
+++ b/.github/workflows/cache-cleanup-on-merge.yml
@@ -8,6 +8,6 @@ jobs:
   cleanup:
     runs-on: ubuntu-latest
     steps:
-      - uses: Alfresco/alfresco-build-tools/.github/actions/gh-cache-cleanup-on-merge@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+      - uses: Alfresco/alfresco-build-tools/.github/actions/gh-cache-cleanup-on-merge@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/enforce-pr-conventions.yml b/.github/workflows/enforce-pr-conventions.yml
index 791ae85ae..bc9a1953e 100644
--- a/.github/workflows/enforce-pr-conventions.yml
+++ b/.github/workflows/enforce-pr-conventions.yml
@@ -17,6 +17,6 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: enforce-pr-conventions
         id: git-naming-convention
-        uses: Alfresco/alfresco-build-tools/.github/actions/enforce-pr-conventions@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/enforce-pr-conventions@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         with:
           jira-project-key: AAE|HXOR
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index c48bc4668..b3f6d9d62 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -28,11 +28,11 @@ jobs:
       - name: Check dependabot build
         uses: Activiti/Activiti/.github/actions/check-ext-build@7700f0283a9ff5181581a350d2520e55c61c1c60 # 8.6.0
       - name: Setup Helm Docs
-        uses: Alfresco/alfresco-build-tools/.github/actions/setup-helm-docs@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/setup-helm-docs@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         with:
           version: 1.13.1
       - name: pre-commit
-        uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         with:
           skip_checkout: true
       - name: Run Checkov
@@ -54,7 +54,7 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-maven-validate-
 
-      - uses: Alfresco/alfresco-build-tools/.github/actions/validate-maven-versions@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+      - uses: Alfresco/alfresco-build-tools/.github/actions/validate-maven-versions@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         with:
           maven-username: ${{ secrets.NEXUS_USERNAME }}
           maven-password: ${{ secrets.NEXUS_PASSWORD }}
@@ -77,12 +77,12 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Build
-        uses: Alfresco/alfresco-build-tools/.github/actions/helm-build-chart@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/helm-build-chart@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         with:
           chart-dir: ${{ env.CHART_DIR }}
 
       - name: Setup Cluster
-        uses: Alfresco/alfresco-build-tools/.github/actions/setup-kind@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/setup-kind@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
 
       - name: Compute Keycloak Client Secret
         id: compute-keycloak-secret
@@ -107,7 +107,7 @@ jobs:
 
       - name: Package Helm Chart
         id: package-helm-chart
-        uses: Alfresco/alfresco-build-tools/.github/actions/helm-package-chart@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/helm-package-chart@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         with:
           chart-dir: ${{ env.CHART_DIR }}
 
@@ -121,19 +121,19 @@ jobs:
 
       - name: Parse next release
         id: helm-parse-next-release
-        uses: Alfresco/alfresco-build-tools/.github/actions/helm-parse-next-release@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/helm-parse-next-release@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         with:
           chart-dir: ${{ env.CHART_DIR }}
 
       - id: calculate-next-internal-version
         name: Calculate next internal release
-        uses: Alfresco/alfresco-build-tools/.github/actions/calculate-next-internal-version@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/calculate-next-internal-version@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         with:
           next-version: ${{ steps.helm-parse-next-release.outputs.next-release }}
 
       - id: helm-release-and-publish
         name: Release and publish helm chart
-        uses: Alfresco/alfresco-build-tools/.github/actions/helm-release-and-publish@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/helm-release-and-publish@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         with:
           version: ${{ steps.calculate-next-internal-version.outputs.next-prerelease }}
           chart-dir: ${{ env.CHART_DIR }}
@@ -168,7 +168,7 @@ jobs:
           MODELING_VERSION=`yq '.alfresco-modeling-service.image.tag' values.yaml`
           echo ${MODELING_VERSION}
           echo "modeling=${MODELING_VERSION}" >> $GITHUB_OUTPUT
-      - uses: Alfresco/alfresco-build-tools/.github/actions/jx-updatebot-pr@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+      - uses: Alfresco/alfresco-build-tools/.github/actions/jx-updatebot-pr@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         env:
           ACTIVITI_CLOUD_COMMON_CHART_VERSION: ${{ steps.get-versions.outputs.chart }}
           ALFRESCO_DEPLOYMENT_SERVICE_VERSION: ${{ steps.get-versions.outputs.deployment }}
@@ -191,6 +191,6 @@ jobs:
     if: always() && failure() && github.event_name == 'push'
     steps:
       - name: Teams Notification
-        uses: Alfresco/alfresco-build-tools/.github/actions/send-teams-notification@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/send-teams-notification@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         with:
           webhook-url: ${{ secrets.TEAMS_NOTIFICATION_AUTOMATE_BACKEND_WEBHOOK }}
diff --git a/.github/workflows/rc.yml b/.github/workflows/rc.yml
index 4cdd1c9f7..e4995ae4d 100644
--- a/.github/workflows/rc.yml
+++ b/.github/workflows/rc.yml
@@ -22,13 +22,13 @@ jobs:
 
       - id: helm-package-chart
         name: Package Helm chart
-        uses: Alfresco/alfresco-build-tools/.github/actions/helm-package-chart@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/helm-package-chart@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         with:
           chart-dir: ${{ env.CHART_DIR }}
 
       - id: helm-publish-chart
         name: Publish Helm chart
-        uses: Alfresco/alfresco-build-tools/.github/actions/helm-publish-chart@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/helm-publish-chart@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         with:
           chart-package: ${{ steps.helm-package-chart.outputs.package-file-path }}
           helm-charts-repo: ${{ env.HELM_REPO }}
@@ -45,6 +45,6 @@ jobs:
     if: always() && failure() && github.event_name == 'push'
     steps:
       - name: Teams Notification
-        uses: Alfresco/alfresco-build-tools/.github/actions/send-teams-notification@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+        uses: Alfresco/alfresco-build-tools/.github/actions/send-teams-notification@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
         with:
           webhook-url: ${{ secrets.TEAMS_NOTIFICATION_AUTOMATE_BACKEND_WEBHOOK }}
diff --git a/.github/workflows/versions-propagation-auto-merge.yml b/.github/workflows/versions-propagation-auto-merge.yml
index 467cecd19..198d28bc0 100644
--- a/.github/workflows/versions-propagation-auto-merge.yml
+++ b/.github/workflows/versions-propagation-auto-merge.yml
@@ -9,7 +9,7 @@ jobs:
   versions-propagation-auto-merge:
     runs-on: ubuntu-latest
     steps:
-    - uses: Alfresco/alfresco-build-tools/.github/actions/automate-propagation@1713976b6d7dc48dfe74f441c9bf1ae9481cbb45 # v8.6.1
+    - uses: Alfresco/alfresco-build-tools/.github/actions/automate-propagation@7a39cf2617f973b673bde0bad0e40593dadfd824 # v8.6.3
       with:
         auto-merge-token: ${{ secrets.BOT_GITHUB_TOKEN }}
         approval-token: ${{ secrets.GITHUB_TOKEN }}