diff --git a/.github/workflows/abi-report.yml b/.github/workflows/abi-report.yml
index 7d0f192a3ed..11a29fb7b1c 100644
--- a/.github/workflows/abi-report.yml
+++ b/.github/workflows/abi-report.yml
@@ -46,10 +46,10 @@ jobs:
           FILE_DOTSMAIN=$(echo "${{ inputs.file_ref }}" | sed -r "s/([0-9]+)\.([0-9]+)\.([0-9]+).*/\1\.\2\.\3/")
           echo "HDF5R_DOTSMAIN=$FILE_DOTSMAIN" >> $GITHUB_OUTPUT
 
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
 
       - name: Get published binary (Linux)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
             name: tgz-ubuntu-2404_gcc-binary
             path: ${{ github.workspace }}
@@ -179,7 +179,7 @@ jobs:
         shell: bash
 
       - name: Save output as artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: abi-reports
           path: |
diff --git a/.github/workflows/analysis.yml b/.github/workflows/analysis.yml
index 5cb8324cb0c..1e7054572ab 100644
--- a/.github/workflows/analysis.yml
+++ b/.github/workflows/analysis.yml
@@ -51,7 +51,7 @@ jobs:
 
     # Get files created by release script
     - name: Get tgz-tarball (Linux_coverage)
-      uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+      uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
       with:
         name: tgz-tarball
         path: ${{ github.workspace }}
@@ -113,7 +113,7 @@ jobs:
 
     # Save log files created by CTest script
     - name: Save log (Linux_coverage)
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v5
       with:
         name: clang-coverage-log
         path: ${{ runner.workspace }}/hdf5/hdf5.log
@@ -131,7 +131,7 @@ jobs:
           sudo apt-get install ninja-build doxygen graphviz curl libtinfo5
 
       - name: add clang to env
-        uses: KyleMayes/install-llvm-action@v2.0.7
+        uses: KyleMayes/install-llvm-action@v2.0.8
         id: setup-clang
         with:
           env: true
@@ -152,7 +152,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (Linux_Leak)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: tgz-tarball
           path: ${{ github.workspace }}
@@ -214,7 +214,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (Linux_Leak)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: leak-ubuntu-log
           path: ${{ runner.workspace }}/hdf5/hdf5.log
@@ -232,7 +232,7 @@ jobs:
           sudo apt-get install ninja-build doxygen graphviz curl libtinfo5
 
       - name: add clang to env
-        uses: KyleMayes/install-llvm-action@v2.0.7
+        uses: KyleMayes/install-llvm-action@v2.0.8
         id: setup-clang
         with:
           env: true
@@ -253,7 +253,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (Linux_Address)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: tgz-tarball
           path: ${{ github.workspace }}
@@ -315,7 +315,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (Linux_Address)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: address-ubuntu-log
           path: ${{ runner.workspace }}/hdf5/hdf5.log
@@ -333,7 +333,7 @@ jobs:
           sudo apt-get install ninja-build doxygen graphviz curl libtinfo5
 
       - name: add clang to env
-        uses: KyleMayes/install-llvm-action@v2.0.7
+        uses: KyleMayes/install-llvm-action@v2.0.8
         id: setup-clang
         with:
           env: true
@@ -354,7 +354,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (Linux_UndefinedBehavior)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: tgz-tarball
           path: ${{ github.workspace }}
@@ -416,7 +416,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (Linux_UndefinedBehavior)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: undefined-ubuntu-log
           path: ${{ runner.workspace }}/hdf5/hdf5.log
diff --git a/.github/workflows/aocc.yml b/.github/workflows/aocc.yml
index 8f21559bb0a..2291cefee41 100644
--- a/.github/workflows/aocc.yml
+++ b/.github/workflows/aocc.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       - name: Install Dependencies
         shell: bash
diff --git a/.github/workflows/arm-main.yml b/.github/workflows/arm-main.yml
index 7cc61ab869b..0679607fe32 100644
--- a/.github/workflows/arm-main.yml
+++ b/.github/workflows/arm-main.yml
@@ -60,7 +60,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
@@ -151,7 +151,7 @@ jobs:
 
       # Save files created by CTest script
       - name: Save published binary (Windows)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: zip-vs2022_cl-${{ inputs.build_mode }}-${{ inputs.save_binary }}-binary
               path: ${{ runner.workspace }}/build/HDF5-*-win64.zip
@@ -175,7 +175,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
@@ -262,7 +262,7 @@ jobs:
                ls -l ${{ runner.workspace }}/build
 
       - name: Save published binary (linux)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: tgz-ubuntu-2404_gcc-${{ inputs.build_mode }}-${{ inputs.save_binary }}-binary
           path: ${{ runner.workspace }}/build/HDF5-*-Linux.tar.gz
@@ -295,7 +295,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
@@ -388,7 +388,7 @@ jobs:
               ls -l ${{ runner.workspace }}/build
 
       - name: Save published binary (Mac_latest)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: tgz-macos14_clang-${{ inputs.build_mode }}-${{ inputs.save_binary }}-binary
               path: ${{ runner.workspace }}/build/HDF5-*-Darwin.tar.gz
diff --git a/.github/workflows/bintest.yml b/.github/workflows/bintest.yml
index 7e6c0b96bcb..6ee149dfa5d 100644
--- a/.github/workflows/bintest.yml
+++ b/.github/workflows/bintest.yml
@@ -33,7 +33,7 @@ jobs:
 
       # Get files created by cmake-ctest script
       - name: Get published binary (Windows)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: zip-vs2022_cl-${{ inputs.build_mode }}-binary
               path: ${{ github.workspace }}/hdf5
@@ -107,7 +107,7 @@ jobs:
           distribution: 'temurin'
 
       - name: Get published binary (Linux)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-ubuntu-2404_gcc-${{ inputs.build_mode }}-binary
               path: ${{ github.workspace }}
@@ -159,7 +159,7 @@ jobs:
           distribution: 'temurin'
 
       - name: Get published binary (MacOS_latest)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: tgz-macos14_clang-${{ inputs.build_mode }}-binary
           path: ${{ github.workspace }}
@@ -222,7 +222,7 @@ jobs:
           distribution: 'temurin'
 
       - name: Get published binary (Linux)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-ubuntu-2404_gcc-${{ inputs.build_mode }}-binary
               path: ${{ github.workspace }}
diff --git a/.github/workflows/build_mpich_source.yml b/.github/workflows/build_mpich_source.yml
index dca17e75eaf..7f78403ac34 100644
--- a/.github/workflows/build_mpich_source.yml
+++ b/.github/workflows/build_mpich_source.yml
@@ -30,7 +30,7 @@ jobs:
           sudo apt-get install build-essential libtool libtool-bin
 
       - name: Get MPICH source
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: 'pmodels/mpich'
           path: 'mpich'
@@ -88,7 +88,7 @@ jobs:
         run: tar -cvf mpich.tar -C ${{ runner.workspace }} mpich
 
       - name: Save MPICH installation artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: mpich
           path: mpich.tar
diff --git a/.github/workflows/build_openmpi_source.yml b/.github/workflows/build_openmpi_source.yml
index 36d2845133b..b2390669760 100644
--- a/.github/workflows/build_openmpi_source.yml
+++ b/.github/workflows/build_openmpi_source.yml
@@ -30,7 +30,7 @@ jobs:
           sudo apt-get install build-essential libtool libtool-bin
 
       - name: Get OpenMPI source
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: 'open-mpi/ompi'
           path: 'ompi'
@@ -81,7 +81,7 @@ jobs:
         run: tar -cvf openmpi.tar -C ${{ runner.workspace }} openmpi
 
       - name: Save OpenMPI installation artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: openmpi
           path: openmpi.tar
diff --git a/.github/workflows/clang-format-check.yml b/.github/workflows/clang-format-check.yml
index c39f93ffd13..d4ad7d49bd1 100644
--- a/.github/workflows/clang-format-check.yml
+++ b/.github/workflows/clang-format-check.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     if: "!contains(github.event.head_commit.message, 'skip-ci')"
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v5.0.0
 
     - name: Run clang-format style check for C and Java code
       uses: DoozyX/clang-format-lint-action@v0.20
diff --git a/.github/workflows/clang-format-fix.yml b/.github/workflows/clang-format-fix.yml
index ab0977e0d10..3d0d306378d 100644
--- a/.github/workflows/clang-format-fix.yml
+++ b/.github/workflows/clang-format-fix.yml
@@ -23,7 +23,7 @@ jobs:
     permissions:
         contents: write # In order to allow EndBug/add-and-commit to commit changes
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v5.0.0
 
     - name: Fix C and Java formatting issues detected by clang-format
       uses: DoozyX/clang-format-lint-action@v0.20
diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
index bf254856c85..54aa37aa692 100644
--- a/.github/workflows/codespell.yml
+++ b/.github/workflows/codespell.yml
@@ -10,5 +10,5 @@ jobs:
     name: Check for spelling errors
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
       - uses: codespell-project/actions-codespell@master
diff --git a/.github/workflows/cross-compile.yml b/.github/workflows/cross-compile.yml
index 5acf6c9cbaf..2684c21d16a 100644
--- a/.github/workflows/cross-compile.yml
+++ b/.github/workflows/cross-compile.yml
@@ -44,7 +44,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v5.0.0
 
       # CMAKE CONFIGURE
       - name: CMake Configure
@@ -96,7 +96,7 @@ jobs:
                ls -l ${{ runner.workspace }}/build
 
       - name: Save published binary (linux)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: tgz-ubuntu-2404_mingw64-${{ inputs.build_mode }}-binary
           path: ${{ runner.workspace }}/build/HDF5-*-win64.zip
diff --git a/.github/workflows/ctest.yml b/.github/workflows/ctest.yml
index 534869fa514..ab976efee6d 100644
--- a/.github/workflows/ctest.yml
+++ b/.github/workflows/ctest.yml
@@ -118,7 +118,7 @@ jobs:
 
       # Get files created by release script
       - name: Get zip-tarball (Windows)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: zip-tarball
               path: ${{ github.workspace }}
@@ -165,7 +165,7 @@ jobs:
         shell: bash
 
       - name: Sign files with Trusted Signing
-        uses: azure/trusted-signing-action@v0.5.9
+        uses: azure/trusted-signing-action@v0.5.10
         with:
           azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
           azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}
@@ -207,14 +207,14 @@ jobs:
 
       # Save files created by CTest script
       - name: Save published binary (Windows)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: zip-vs2022_cl-binary
               path: ${{ runner.workspace }}/build/${{ steps.set-file-base.outputs.FILE_BASE }}-win-vs2022_cl.zip
               if-no-files-found: error # 'warn' or 'ignore' are also available, defaults to `warn`
 
       - name: Save published msi binary (Windows)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: msi-vs2022_cl-binary
               path: ${{ runner.workspace }}/buildmsi/${{ steps.set-file-base.outputs.FILE_BASE }}-win-vs2022_cl.msi
@@ -264,7 +264,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (Linux)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
@@ -316,21 +316,21 @@ jobs:
 
       # Save files created by CTest script
       - name: Save published binary (Linux)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: tgz-ubuntu-2404_gcc-binary
               path: ${{ runner.workspace }}/build/${{ steps.set-file-base.outputs.FILE_BASE }}-ubuntu-2404_gcc.tar.gz
               if-no-files-found: error # 'warn' or 'ignore' are also available, defaults to `warn`
 
       - name: Save published binary deb (Linux)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: deb-ubuntu-2404_gcc-binary
               path: ${{ runner.workspace }}/builddeb/${{ steps.set-file-base.outputs.FILE_BASE }}-ubuntu-2404_gcc.deb
               if-no-files-found: error # 'warn' or 'ignore' are also available, defaults to `warn`
 
       - name: Save published binary rpm (Linux)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: rpm-ubuntu-2404_gcc-binary
               path: ${{ runner.workspace }}/buildrpm/${{ steps.set-file-base.outputs.FILE_BASE }}-ubuntu-2404_gcc.rpm
@@ -338,7 +338,7 @@ jobs:
 
       # Save doxygen files created by CTest script
       - name: Save published doxygen (Linux)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: docs-doxygen
               path: ${{ runner.workspace }}/hdf5/build/${{ inputs.preset_name }}-GNUC/hdf5lib_docs/html
@@ -420,7 +420,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (MacOS_latest)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
@@ -563,14 +563,14 @@ jobs:
 
       # Save files created by CTest script
       - name: Save published binary (MacOS_latest)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: tgz-macos14_clang-binary
               path: ${{ runner.workspace }}/build/${{ steps.set-file-base.outputs.FILE_BASE }}-macos14_clang.tar.gz
               if-no-files-found: error # 'warn' or 'ignore' are also available, defaults to `warn`
 
       - name: Save published dmg binary (MacOS_latest)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: tgz-macos14_clang-dmg-binary
               path: ${{ runner.workspace }}/builddmg/${{ steps.set-file-base.outputs.FILE_BASE }}-macos14_clang.dmg
@@ -594,7 +594,7 @@ jobs:
             ninjaVersion: latest
 
       - name: Install aws-c-s3 (Cached installation)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: libaws-c-s3-Release
 
@@ -627,7 +627,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (Linux S3)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
@@ -665,7 +665,7 @@ jobs:
 
       # Save files created by CTest script
       - name: Save published binary (Linux S3)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: tgz-ubuntu-2404_gcc_s3-binary
               path: ${{ runner.workspace }}/build/${{ steps.set-file-base.outputs.FILE_BASE }}-ubuntu-2404_gcc_s3.tar.gz
@@ -711,7 +711,7 @@ jobs:
 
       # Get files created by release script
       - name: Get zip-tarball (Windows_intel)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: zip-tarball
               path: ${{ github.workspace }}
@@ -761,7 +761,7 @@ jobs:
         shell: pwsh
 
       - name: Sign files with Trusted Signing (Windows_intel)
-        uses: azure/trusted-signing-action@v0.5.9
+        uses: azure/trusted-signing-action@v0.5.10
         with:
           azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
           azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}
@@ -803,14 +803,14 @@ jobs:
 
       # Save files created by CTest script
       - name: Save published binary (Windows_intel)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: zip-vs2022_intel-binary
               path: ${{ runner.workspace }}/build/${{ steps.set-file-base.outputs.FILE_BASE }}-win-vs2022_intel.zip
               if-no-files-found: error # 'warn' or 'ignore' are also available, defaults to `warn`
 
       - name: Save published msi binary (Windows_intel)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: msi-vs2022_intel-binary
               path: ${{ runner.workspace }}/buildmsi/${{ steps.set-file-base.outputs.FILE_BASE }}-win-vs2022_intel.msi
@@ -856,7 +856,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (Linux_intel)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
@@ -897,7 +897,7 @@ jobs:
 
       # Save files created by CTest script
       - name: Save published binary (Linux_intel)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: tgz-ubuntu-2404_intel-binary
               path: ${{ runner.workspace }}/build/${{ steps.set-file-base.outputs.FILE_BASE }}-ubuntu-2404_intel.tar.gz
diff --git a/.github/workflows/cve.yml b/.github/workflows/cve.yml
index 41fe56ec450..72653e674c8 100644
--- a/.github/workflows/cve.yml
+++ b/.github/workflows/cve.yml
@@ -28,7 +28,7 @@ jobs:
     name: CVE regression
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
 
       - name: Install HDF5
         run: |
@@ -38,7 +38,7 @@ jobs:
           make
           sudo make install
       - name: Checkout CVE test repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: HDFGroup/cve_hdf5
           path: cve_hdf5
diff --git a/.github/workflows/cygwin.yml b/.github/workflows/cygwin.yml
index 189839f76b3..ac6fa39b425 100644
--- a/.github/workflows/cygwin.yml
+++ b/.github/workflows/cygwin.yml
@@ -33,7 +33,7 @@ jobs:
           git config --global core.autocrlf input
 
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       - name: Install Cygwin
         uses: cygwin/cygwin-install-action@master
@@ -56,7 +56,7 @@ jobs:
 
       # Get files created by release script
       - name: Get zip-tarball (Cygwin)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: zip-tarball
               path: ${{ github.workspace }}
@@ -119,7 +119,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (Cygwin)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
             name: gcc-cygwin-log
             path: ${{ runner.workspace }}/hdf5/hdf5.log
diff --git a/.github/workflows/daily-build.yml b/.github/workflows/daily-build.yml
index 74c365a05cb..654db1f7b5d 100644
--- a/.github/workflows/daily-build.yml
+++ b/.github/workflows/daily-build.yml
@@ -36,7 +36,7 @@ jobs:
       run-ignore: ${{ steps.getinputs.outputs.INPUTS_IGNORE }}
 
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v5.0.0
 
     - name: Get hdf5 release base name
       uses: dsaltares/fetch-gh-release-asset@master
diff --git a/.github/workflows/daily-schedule.yml b/.github/workflows/daily-schedule.yml
index a888bc70420..988d64d3916 100644
--- a/.github/workflows/daily-schedule.yml
+++ b/.github/workflows/daily-schedule.yml
@@ -36,7 +36,7 @@ jobs:
 
       # Get files created by tarball script
       - name: Get doxygen (Linux)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: docs-doxygen
           path: ${{ github.workspace }}/${{ steps.get-file-base.outputs.FILE_BASE }}.doxygen
diff --git a/.github/workflows/dev.yml b/.github/workflows/dev.yml
index 620f5cfcb74..1e6a7b90c3c 100644
--- a/.github/workflows/dev.yml
+++ b/.github/workflows/dev.yml
@@ -39,7 +39,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (Linux)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
@@ -130,7 +130,7 @@ jobs:
 
       # Get files created by release script
       - name: Get zip-tarball (Windows)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: zip-tarball
               path: ${{ github.workspace }}
@@ -208,7 +208,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (MacOS_latest)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
@@ -266,7 +266,7 @@ jobs:
           sudo apt-get install ninja-build doxygen graphviz curl libtinfo5
 
       - name: add clang to env
-        uses: KyleMayes/install-llvm-action@v2.0.7
+        uses: KyleMayes/install-llvm-action@v2.0.8
         id: setup-clang
         with:
           env: true
@@ -299,7 +299,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (Linux_clang)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: tgz-tarball
           path: ${{ github.workspace }}
diff --git a/.github/workflows/h5py.yml b/.github/workflows/h5py.yml
index a97bd2f3c99..dc0ac9ba6f2 100644
--- a/.github/workflows/h5py.yml
+++ b/.github/workflows/h5py.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout Spack
-      uses: actions/checkout@v5
+      uses: actions/checkout@v5.0.0
       with:
         repository: spack/spack
         path: ./spack
diff --git a/.github/workflows/hdfeos5.yml b/.github/workflows/hdfeos5.yml
index d2d71f01e17..986537da93d 100644
--- a/.github/workflows/hdfeos5.yml
+++ b/.github/workflows/hdfeos5.yml
@@ -36,7 +36,7 @@ jobs:
             sudo apt install -y libaec-dev zlib1g-dev automake autoconf libcurl4-openssl-dev libjpeg-dev wget curl bzip2 m4 flex bison cmake libzip-dev doxygen openssl libtool libtool-bin
 
       - name: Checkout HDF5
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       - name: Configure
         run: |
diff --git a/.github/workflows/i386.yml b/.github/workflows/i386.yml
index e062b7af94a..842e1d67b1f 100644
--- a/.github/workflows/i386.yml
+++ b/.github/workflows/i386.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       - name: setup alpine
         uses: jirutka/setup-alpine@v1
diff --git a/.github/workflows/intel.yml b/.github/workflows/intel.yml
index 35230e9ef65..d28b7e425e3 100644
--- a/.github/workflows/intel.yml
+++ b/.github/workflows/intel.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Get Sources (Linux)
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       - name: Install Dependencies (Linux)
         shell: bash
@@ -71,7 +71,7 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Get Sources (Windows)
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       - name: Install Dependencies (Windows)
         run: choco install ninja
diff --git a/.github/workflows/julia.yml b/.github/workflows/julia.yml
index 46bfe7d2be6..a56b3999337 100644
--- a/.github/workflows/julia.yml
+++ b/.github/workflows/julia.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Get HDF5 source
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       - name: Install Dependencies
         shell: bash
@@ -64,7 +64,7 @@ jobs:
           arch: 'x64'
 
       - name: Get julia hdf5 source
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: JuliaIO/HDF5.jl
           path: .
diff --git a/.github/workflows/linkchecker.yml b/.github/workflows/linkchecker.yml
index daa0b81cd5f..08177ccc296 100644
--- a/.github/workflows/linkchecker.yml
+++ b/.github/workflows/linkchecker.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       - name: Install System Dependencies
         run: |
@@ -42,7 +42,7 @@ jobs:
 
       - name: Run Comprehensive Link Check
         id: lychee
-        uses: lycheeverse/lychee-action@v2.6.1
+        uses: lycheeverse/lychee-action@v2.7.0
         with:
           args: >
             --verbose
diff --git a/.github/workflows/macos-26-matrix.yml b/.github/workflows/macos-26-matrix.yml
index 1e0eb159b6b..bfabd339d59 100644
--- a/.github/workflows/macos-26-matrix.yml
+++ b/.github/workflows/macos-26-matrix.yml
@@ -187,7 +187,7 @@ jobs:
 
 
     - name: Get Sources
-      uses: actions/checkout@v5
+      uses: actions/checkout@v5.0.0
 
     - name: Configure
       run: |
@@ -268,7 +268,7 @@ jobs:
         CTEST_TIMEOUT: 3600
 
     - name: Upload Test Results
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v5
       if: always()
       with:
         name: test-results-${{ matrix.name }}
diff --git a/.github/workflows/main-par-spc.yml b/.github/workflows/main-par-spc.yml
index 955f2353eb8..8b72f172cba 100644
--- a/.github/workflows/main-par-spc.yml
+++ b/.github/workflows/main-par-spc.yml
@@ -23,7 +23,7 @@ jobs:
     name: "Parallel GCC-${{ inputs.build_mode }}"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
 
       - name: Install Linux Dependencies
         run: |
diff --git a/.github/workflows/main-par.yml b/.github/workflows/main-par.yml
index 55bc6d3119b..d3996c2b44e 100644
--- a/.github/workflows/main-par.yml
+++ b/.github/workflows/main-par.yml
@@ -23,7 +23,7 @@ jobs:
     name: "Parallel GCC-${{ inputs.build_mode }}"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
 
       - name: Install Linux Dependencies
         run: |
diff --git a/.github/workflows/main-spc.yml b/.github/workflows/main-spc.yml
index 037d67d307d..b092fbc6ab0 100644
--- a/.github/workflows/main-spc.yml
+++ b/.github/workflows/main-spc.yml
@@ -36,7 +36,7 @@ jobs:
  
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
@@ -95,7 +95,7 @@ jobs:
  
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
@@ -149,7 +149,7 @@ jobs:
  
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
@@ -203,7 +203,7 @@ jobs:
  
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
@@ -255,7 +255,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
@@ -307,7 +307,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
@@ -365,7 +365,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       - name: Configure (Windows)
         shell: pwsh
@@ -412,7 +412,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
@@ -469,7 +469,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
@@ -522,7 +522,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
@@ -575,7 +575,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
@@ -623,7 +623,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 7122374a324..c53c4ae940c 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -168,7 +168,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
@@ -286,7 +286,7 @@ jobs:
 
       # Save files created by CTest script
       - name: Save published binary (Windows)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: zip-vs2022_cl-${{ inputs.build_mode }}-binary
               path: ${{ runner.workspace }}/build/HDF5-*-win64.zip
@@ -294,7 +294,7 @@ jobs:
         if:  ${{ (matrix.ostype == 'windows') && ( inputs.save_binary != 'skip') }}
 
       - name: Save published binary (linux)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: tgz-ubuntu-2404_gcc-${{ inputs.build_mode }}-binary
               path: ${{ runner.workspace }}/build/HDF5-*-Linux.tar.gz
@@ -302,7 +302,7 @@ jobs:
         if:  ${{ (matrix.ostype == 'ubuntu') && ( inputs.save_binary != 'skip') }}
 
       - name: Save published binary (Mac_latest)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: tgz-macos14_clang-${{ inputs.build_mode }}-binary
               path: ${{ runner.workspace }}/build/HDF5-*-Darwin.tar.gz
@@ -441,7 +441,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # CONFIGURE
       - name: Configure
diff --git a/.github/workflows/msys2.yml b/.github/workflows/msys2.yml
index c7894994681..125f9726c85 100644
--- a/.github/workflows/msys2.yml
+++ b/.github/workflows/msys2.yml
@@ -52,7 +52,7 @@ jobs:
           git config --global core.autocrlf input
 
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       - name: Configure
         run: |
diff --git a/.github/workflows/netcdf.yml b/.github/workflows/netcdf.yml
index 6698fa44892..1eaca57917e 100644
--- a/.github/workflows/netcdf.yml
+++ b/.github/workflows/netcdf.yml
@@ -35,7 +35,7 @@ jobs:
         sudo apt install -y libaec-dev zlib1g-dev automake autoconf libcurl4-openssl-dev libjpeg-dev wget curl bzip2 m4 flex bison cmake libzip-dev doxygen openssl libtool libtool-bin
 
     - name: Checkout HDF5
-      uses: actions/checkout@v5
+      uses: actions/checkout@v5.0.0
 
     - name: Configure
       run: |
@@ -69,7 +69,7 @@ jobs:
       working-directory: ${{ runner.workspace }}/build
 
     - name: Checkout netCDF
-      uses: actions/checkout@v5
+      uses: actions/checkout@v5.0.0
       with:
         repository: unidata/netcdf-c
         path: netcdf-c
diff --git a/.github/workflows/nvhpc.yml b/.github/workflows/nvhpc.yml
index 4d6f6b6c0d9..107c3118ee3 100644
--- a/.github/workflows/nvhpc.yml
+++ b/.github/workflows/nvhpc.yml
@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       - name: Free Disk Space (Ubuntu)
         uses: jlumbroso/free-disk-space@v1.3.1
diff --git a/.github/workflows/par-script.yml b/.github/workflows/par-script.yml
index 903b6f511f8..f30b7b0fc91 100644
--- a/.github/workflows/par-script.yml
+++ b/.github/workflows/par-script.yml
@@ -38,7 +38,7 @@ jobs:
         mpi: [ 'msmpi', 'intelmpi']
     name: "Parallel ${{ matrix.mpi }} Windows-${{ inputs.build_mode }}"
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
 
       - name: Install Dependencies (Windows)
         run: choco install ninja
@@ -84,7 +84,7 @@ jobs:
 
       # Get files created by release script
       - name: Get zip-tarball (Windows)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: zip-tarball
               path: ${{ github.workspace }}
@@ -155,7 +155,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (${{ matrix.mpi }})
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: windows-${{ matrix.mpi }}-log
           path: ${{ runner.workspace }}/hdf5/hdf5.log
@@ -213,7 +213,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (${{ matrix.mpi }})
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
@@ -275,7 +275,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (${{ matrix.mpi }})
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: linux-${{ matrix.mpi }}-log
           path: ${{ runner.workspace }}/hdf5/hdf5.log
@@ -287,7 +287,7 @@ jobs:
         mpi: [ 'mpich', 'openmpi']
     name: "Parallel ${{ matrix.mpi }} macos-${{ inputs.build_mode }}"
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
 
       - name: Install Dependencies (MacOS_latest)
         run: brew install ninja
@@ -323,7 +323,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (${{ matrix.mpi }})
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
@@ -385,7 +385,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (${{ matrix.mpi }})
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: macos-${{ matrix.mpi }}-log
           path: ${{ runner.workspace }}/hdf5/hdf5.log
diff --git a/.github/workflows/par-source.yml b/.github/workflows/par-source.yml
index 61d46857c22..013cfd6adbf 100644
--- a/.github/workflows/par-source.yml
+++ b/.github/workflows/par-source.yml
@@ -55,7 +55,7 @@ jobs:
           sudo apt install libaec0 libaec-dev
 
       - name: Get MPI installation (OpenMPI)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: openmpi
 
@@ -97,7 +97,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (OpenMPI)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
@@ -157,7 +157,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (OpenMPI)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: openmpi-log
           path: ${{ runner.workspace }}/hdf5/hdf5.log
@@ -168,7 +168,7 @@ jobs:
     name: "Parallel Mpich GCC-${{ inputs.build_mode }}"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
 
       - name: Install Linux Dependencies (MPICH)
         run: |
@@ -177,7 +177,7 @@ jobs:
           sudo apt install libaec0 libaec-dev
 
       - name: Get MPI installation (MPICH)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: mpich
 
@@ -219,7 +219,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (MPICH)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
@@ -279,7 +279,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (MPICH)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: mpich-log
           path: ${{ runner.workspace }}/hdf5/hdf5.log
diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index e4032f7c18a..581187ff8d4 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -50,7 +50,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE
       - name: Get Sources
-        uses: actions/checkout@v5  # Updated to latest stable
+        uses: actions/checkout@v5.0.0  # Updated to latest stable
         with:
           fetch-depth: 0
           ref: '${{ github.head_ref || github.ref_name }}'
diff --git a/.github/workflows/release-files.yml b/.github/workflows/release-files.yml
index 2d9c5f6c692..1b35c2c95fb 100644
--- a/.github/workflows/release-files.yml
+++ b/.github/workflows/release-files.yml
@@ -73,7 +73,7 @@ jobs:
 
       # Get files created by tarball script
       - name: Get doxygen (Linux)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: docs-doxygen
               path: ${{ github.workspace }}/${{ steps.get-file-base.outputs.FILE_BASE }}.doxygen
@@ -82,100 +82,100 @@ jobs:
         run: zip -r ${{ steps.get-file-base.outputs.FILE_BASE }}.doxygen.zip ./${{ steps.get-file-base.outputs.FILE_BASE }}.doxygen
 
       - name: Get tgz-tarball (Linux)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
 
       - name: Get zip-tarball (Windows)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: zip-tarball
               path: ${{ github.workspace }}
 
       # Get files created by cmake-ctest script
       - name: Get published binary (Windows)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: zip-vs2022_cl-binary
               path: ${{ github.workspace }}
 
       - name: Get published msi binary (Windows)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: msi-vs2022_cl-binary
               path: ${{ github.workspace }}
 
       - name: Get published binary (MacOS)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-macos14_clang-binary
               path: ${{ github.workspace }}
 
       - name: Get published dmg binary (MacOS)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-macos14_clang-dmg-binary
               path: ${{ github.workspace }}
 
       - name: Get published binary (Linux)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-ubuntu-2404_gcc-binary
               path: ${{ github.workspace }}
 
       - name: Get published deb binary (Linux)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: deb-ubuntu-2404_gcc-binary
               path: ${{ github.workspace }}
 
       - name: Get published rpm binary (Linux)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: rpm-ubuntu-2404_gcc-binary
               path: ${{ github.workspace }}
 
       - name: Get published binary (Linux S3)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-ubuntu-2404_gcc_s3-binary
               path: ${{ github.workspace }}
 
       - name: Get published binary (Windows_intel)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: zip-vs2022_intel-binary
               path: ${{ github.workspace }}
 
       - name: Get published msi binary (Windows_intel)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: msi-vs2022_intel-binary
               path: ${{ github.workspace }}
 
       - name: Get published binary (Linux_intel)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-ubuntu-2404_intel-binary
               path: ${{ github.workspace }}
 
       - name: Get published abi reports (Linux)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: abi-reports
               path: ${{ github.workspace }}
 
       - name: Get published nonversioned source (tgz)
         if: ${{ (inputs.use_environ == 'release') }}
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball-nover
               path: ${{ github.workspace }}
 
       - name: Get published nonversioned source (zip)
         if: ${{ (inputs.use_environ == 'release') }}
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: zip-tarball-nover
               path: ${{ github.workspace }}
@@ -209,7 +209,7 @@ jobs:
           echo "${{ steps.get-file-base.outputs.FILE_BASE }}" > ./last-file.txt
 
       - name: Get description.txt for release/snapshot
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
                 name: description.txt
                 path: ${{ github.workspace }}
@@ -217,7 +217,7 @@ jobs:
       - name: PreRelease tag
         id: create_prerelease
         if: ${{ (inputs.use_environ == 'snapshots') }}
-        uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2.3.3
+        uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1
         with:
           tag_name: "${{ inputs.use_tag }}"
           prerelease: true
@@ -258,7 +258,7 @@ jobs:
       - name: Release tag
         id: create_release
         if: ${{ (inputs.use_environ == 'release') }}
-        uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2.3.3
+        uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1
         with:
           tag_name: "${{ steps.create_release_tag_name.outputs.TAG_BASE }}"
           name: "HDF5 Release ${{ inputs.use_tag }}"
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index e28447a24f4..676d08cb14d 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -59,7 +59,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: SARIF file
           path: results.sarif
@@ -67,6 +67,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
+        uses: github/codeql-action/upload-sarif@0499de31b99561a6d14a36a5f662c2a54f91beee # v3.29.5
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/script.yml b/.github/workflows/script.yml
index 6322998128b..4e43b97ce54 100644
--- a/.github/workflows/script.yml
+++ b/.github/workflows/script.yml
@@ -72,7 +72,7 @@ jobs:
 
       # Get files created by release script
       - name: Get zip-tarball (Windows)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: zip-tarball
               path: ${{ github.workspace }}
@@ -136,7 +136,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (Windows_intel)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: cl-win-log
           path: ${{ runner.workspace }}/hdf5/hdf5.log
@@ -179,7 +179,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (Linux)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
@@ -234,7 +234,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (Linux)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
             name: gcc-ubuntu-log
             path: ${{ runner.workspace }}/hdf5/hdf5.log
@@ -293,7 +293,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (MacOS_latest)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
@@ -357,7 +357,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (MacOS_latest)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: macos-log
           path: ${{ runner.workspace }}/hdf5/hdf5.log
@@ -381,7 +381,7 @@ jobs:
             ninjaVersion: latest
 
       - name: Install aws-c-s3 (Cached installation)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: libaws-c-s3-Release
 
@@ -414,7 +414,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (Linux S3)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
@@ -469,7 +469,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (Linux S3)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: s3-ubuntu-log
           path: ${{ runner.workspace }}/hdf5/hdf5.log
@@ -514,7 +514,7 @@ jobs:
 
       # Get files created by release script
       - name: Get zip-tarball (Windows_intel)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: zip-tarball
               path: ${{ github.workspace }}
@@ -583,7 +583,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (Windows_intel)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: intel-win-log
           path: ${{ runner.workspace }}/hdf5/hdf5.log
@@ -628,7 +628,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (Linux_intel)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
               name: tgz-tarball
               path: ${{ github.workspace }}
@@ -686,7 +686,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (Linux_intel)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: intel-ubuntu-log
           path: ${{ runner.workspace }}/hdf5/hdf5.log
@@ -705,7 +705,7 @@ jobs:
           sudo apt-get install ninja-build doxygen graphviz curl libtinfo5
 
       - name: add clang to env
-        uses: KyleMayes/install-llvm-action@v2.0.7
+        uses: KyleMayes/install-llvm-action@v2.0.8
         id: setup-clang
         with:
           env: true
@@ -744,7 +744,7 @@ jobs:
 
       # Get files created by release script
       - name: Get tgz-tarball (Linux_clang)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: tgz-tarball
           path: ${{ github.workspace }}
@@ -801,7 +801,7 @@ jobs:
 
       # Save log files created by CTest script
       - name: Save log (Linux_clang)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: clang-ubuntu-log
           path: ${{ runner.workspace }}/hdf5/hdf5.log
diff --git a/.github/workflows/tarball.yml b/.github/workflows/tarball.yml
index 7123e1e46d6..e3b368c7009 100644
--- a/.github/workflows/tarball.yml
+++ b/.github/workflows/tarball.yml
@@ -48,7 +48,7 @@ jobs:
       branch_ref: ${{ steps.get-branch-name.outputs.BRANCH_REF }}
       branch_sha: ${{ steps.get-branch-sha.outputs.BRANCH_SHA }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v5.0.0
 
     - name: Get branch name
       id: get-branch-name
@@ -92,7 +92,7 @@ jobs:
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           path: hdfsrc
           ref: '${{needs.check_commits.outputs.branch_ref }}'
@@ -164,14 +164,14 @@ jobs:
 
       # Save files created by release script
       - name: Save tgz-tarball
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: tgz-tarball
               path: ${{ steps.set-file-base.outputs.FILE_BASE }}.tar.gz
               if-no-files-found: error # 'warn' or 'ignore' are also available, defaults to `warn`
 
       - name: Save zip-tarball
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: zip-tarball
               path: ${{ steps.set-file-base.outputs.FILE_BASE }}.zip
@@ -179,7 +179,7 @@ jobs:
 
       - name: Save tgz-tarball-nover
         if: ${{ (inputs.use_environ == 'release') }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: tgz-tarball-nover
               path: hdf5.tar.gz
@@ -187,7 +187,7 @@ jobs:
 
       - name: Save zip-tarball-nover
         if: ${{ (inputs.use_environ == 'release') }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: zip-tarball-nover
               path: hdf5.zip
@@ -203,7 +203,7 @@ jobs:
               ls $GITHUB_WORKSPACE
 
       - name: Upload description.txt
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
               name: description.txt
               path: ./description.txt
diff --git a/.github/workflows/testxpr.yml b/.github/workflows/testxpr.yml
index f40e2aaeebe..381fb636159 100644
--- a/.github/workflows/testxpr.yml
+++ b/.github/workflows/testxpr.yml
@@ -34,7 +34,7 @@ jobs:
            echo "FC=gfortran-12" >> $GITHUB_ENV
 
       - name: Get Sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       - name: Configure
         shell: bash
diff --git a/.github/workflows/update-progress.yml b/.github/workflows/update-progress.yml
index fefbe598cb9..e51e3e0c6c2 100644
--- a/.github/workflows/update-progress.yml
+++ b/.github/workflows/update-progress.yml
@@ -13,7 +13,7 @@ jobs:
     if: github.repository_owner == 'HDFGROUP'
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@v5.0.0
         
     - name: Set up Python
       uses: actions/setup-python@v6
diff --git a/.github/workflows/vfd-ros3.yml b/.github/workflows/vfd-ros3.yml
index c5a447360cf..f5f2afb643d 100644
--- a/.github/workflows/vfd-ros3.yml
+++ b/.github/workflows/vfd-ros3.yml
@@ -42,14 +42,14 @@ jobs:
     steps:
       - name: Get aws-c-s3 sources (main)
         if: inputs.aws_c_s3_tag == ''
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: awslabs/aws-c-s3
           path: aws-c-s3
 
       - name: Get aws-c-s3 sources (tag)
         if: inputs.aws_c_s3_tag != ''
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: awslabs/aws-c-s3
           path: aws-c-s3
@@ -75,70 +75,70 @@ jobs:
 
       - name: Get aws-lc sources
         if: ${{ steps.cache-aws-c-s3-ubuntu-gcc.outputs.cache-hit != 'true' }}
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: aws/aws-lc
           path: aws-lc
 
       - name: Get s2n-tls sources
         if: ${{ steps.cache-aws-c-s3-ubuntu-gcc.outputs.cache-hit != 'true' }}
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: aws/s2n-tls
           path: s2n-tls
 
       - name: Get aws-c-common sources
         if: ${{ steps.cache-aws-c-s3-ubuntu-gcc.outputs.cache-hit != 'true' }}
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: awslabs/aws-c-common
           path: aws-c-common
 
       - name: Get aws-checksums sources
         if: ${{ steps.cache-aws-c-s3-ubuntu-gcc.outputs.cache-hit != 'true' }}
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: awslabs/aws-checksums
           path: aws-checksums
 
       - name: Get aws-c-cal sources
         if: ${{ steps.cache-aws-c-s3-ubuntu-gcc.outputs.cache-hit != 'true' }}
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: awslabs/aws-c-cal
           path: aws-c-cal
 
       - name: Get aws-c-io sources
         if: ${{ steps.cache-aws-c-s3-ubuntu-gcc.outputs.cache-hit != 'true' }}
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: awslabs/aws-c-io
           path: aws-c-io
 
       - name: Get aws-c-compression sources
         if: ${{ steps.cache-aws-c-s3-ubuntu-gcc.outputs.cache-hit != 'true' }}
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: awslabs/aws-c-compression
           path: aws-c-compression
 
       - name: Get aws-c-http sources
         if: ${{ steps.cache-aws-c-s3-ubuntu-gcc.outputs.cache-hit != 'true' }}
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: awslabs/aws-c-http
           path: aws-c-http
 
       - name: Get aws-c-sdkutils sources
         if: ${{ steps.cache-aws-c-s3-ubuntu-gcc.outputs.cache-hit != 'true' }}
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: awslabs/aws-c-sdkutils
           path: aws-c-sdkutils
 
       - name: Get aws-c-auth sources
         if: ${{ steps.cache-aws-c-s3-ubuntu-gcc.outputs.cache-hit != 'true' }}
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: awslabs/aws-c-auth
           path: aws-c-auth
@@ -237,7 +237,7 @@ jobs:
         run: tar -cvf libaws-c-s3.tar -C ${{ runner.workspace }} aws-c-s3-build
 
       - name: Save aws-c-s3 installation artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: libaws-c-s3-${{ inputs.build_mode }}
           path: libaws-c-s3.tar
@@ -285,7 +285,7 @@ jobs:
 
       - name: Install libaws-c-s3 (Ubuntu) (Cached installation)
         if: ${{ matrix.os_name == 'Ubuntu GCC' }}
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: libaws-c-s3-${{ inputs.build_mode }}
 
@@ -318,7 +318,7 @@ jobs:
           echo "CC=cl.exe" >> $GITHUB_ENV
 
       - name: Get HDF5 sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       # For Windows, use vcpkg toolchain file to allow find_package() calls to resolve
       - name: "Configure (vcpkg; ROS3 testing: ${{ matrix.test_ros3 }})"
@@ -396,7 +396,7 @@ jobs:
 
     steps:
       - name: Install libaws-c-s3 (Cached installation)
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: libaws-c-s3-${{ inputs.build_mode }}
 
@@ -415,7 +415,7 @@ jobs:
           echo "CMAKE_PREFIX_PATH=${{ runner.workspace }}/aws-c-s3-build" >> $GITHUB_ENV
 
       - name: Get HDF5 sources
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       - name: Configure
         run: |
diff --git a/.github/workflows/vfd-subfiling.yml b/.github/workflows/vfd-subfiling.yml
index f279b2417ff..1d6e18b6d4a 100644
--- a/.github/workflows/vfd-subfiling.yml
+++ b/.github/workflows/vfd-subfiling.yml
@@ -65,7 +65,7 @@ jobs:
         if: ${{ matrix.os == 'ubuntu-latest' && matrix.mpi_lib == 'MPICH' }}
 
       - name: Checkout HDF5
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
 
       - name: Configure HDF5 with Subfiling VFD
         shell: bash
diff --git a/.github/workflows/vol_adios2.yml b/.github/workflows/vol_adios2.yml
index 3f53f156dc3..2eaa3db6d23 100644
--- a/.github/workflows/vol_adios2.yml
+++ b/.github/workflows/vol_adios2.yml
@@ -26,7 +26,7 @@ jobs:
           sudo apt-get install libopenmpi-dev
 
       - name: Checkout HDF5
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           path: hdf5
 
@@ -73,7 +73,7 @@ jobs:
 
       - if: ${{ steps.cache-adios2.outputs.cache-hit != 'true' }}
         name: Checkout ADIOS2 (${{ env.ADIOS2_COMMIT_SHORT }})
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: ornladios/ADIOS2
           ref: ${{ env.ADIOS2_COMMIT }}
diff --git a/.github/workflows/vol_async.yml b/.github/workflows/vol_async.yml
index 0e84aa6b439..54b8c5d65da 100644
--- a/.github/workflows/vol_async.yml
+++ b/.github/workflows/vol_async.yml
@@ -22,12 +22,12 @@ jobs:
           sudo apt-get install automake autoconf libtool libtool-bin libopenmpi-dev
 
       - name: Checkout HDF5
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           path: hdf5
 
       - name: Checkout Argobots
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: pmodels/argobots
           path: abt
diff --git a/.github/workflows/vol_cache.yml b/.github/workflows/vol_cache.yml
index 0e0aeec377a..f8919f3cbac 100644
--- a/.github/workflows/vol_cache.yml
+++ b/.github/workflows/vol_cache.yml
@@ -35,12 +35,12 @@ jobs:
           sudo apt-get install automake autoconf libtool libtool-bin libopenmpi-dev
 
       - name: Checkout HDF5
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           path: hdf5
 
       - name: Checkout Argobots
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: pmodels/argobots
           path: abt
diff --git a/.github/workflows/vol_ext_passthru.yml b/.github/workflows/vol_ext_passthru.yml
index 6f9e72559b6..22f5fb4f617 100644
--- a/.github/workflows/vol_ext_passthru.yml
+++ b/.github/workflows/vol_ext_passthru.yml
@@ -22,12 +22,12 @@ jobs:
           sudo apt-get install libopenmpi-dev
 
       - name: Checkout HDF5
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           path: hdf5
 
       - name: Checkout vol-external-passthrough
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: hpc-io/vol-external-passthrough
           path: vol-external-passthrough
diff --git a/.github/workflows/vol_log.yml b/.github/workflows/vol_log.yml
index 10c84cc69f6..1779ba09260 100644
--- a/.github/workflows/vol_log.yml
+++ b/.github/workflows/vol_log.yml
@@ -23,7 +23,7 @@ jobs:
           #mpich
 
       - name: Checkout HDF5
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           path: hdf5
 
@@ -56,7 +56,7 @@ jobs:
           echo "PATH=${{ runner.workspace }}/hdf5_build/bin:${PATH}" >> $GITHUB_ENV
 
       - name: Checkout Log-based VOL
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: HDFGroup/vol-log-based
           path: vol-log-based
diff --git a/.github/workflows/vol_rest.yml b/.github/workflows/vol_rest.yml
index 005b3ad4289..de7b03bb23c 100644
--- a/.github/workflows/vol_rest.yml
+++ b/.github/workflows/vol_rest.yml
@@ -42,7 +42,7 @@ jobs:
           sudo apt-get install libcurl4-openssl-dev libyajl-dev
 
       - name: Checkout HDF5
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           path: hdf5
 
@@ -82,7 +82,7 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Checkout HSDS
-        uses: actions/checkout@v5
+        uses: actions/checkout@v5.0.0
         with:
           repository: HDFGroup/hsds
           path: ${{github.workspace}}/hsds