diff --git a/.github/workflows/checks.apicheck.yml b/.github/workflows/checks.apicheck.yml
index f0714c4b3..413a2e2f9 100644
--- a/.github/workflows/checks.apicheck.yml
+++ b/.github/workflows/checks.apicheck.yml
@@ -105,7 +105,7 @@ jobs:
       - name: "Setup: Yarn"
         run: pnpm install -g yarn@1.22.19
       - name: "Setup: GraalVM (Java 22)"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: 23
diff --git a/.github/workflows/checks.codeql.yml b/.github/workflows/checks.codeql.yml
index 374badbb5..d3541a131 100644
--- a/.github/workflows/checks.codeql.yml
+++ b/.github/workflows/checks.codeql.yml
@@ -95,7 +95,7 @@ jobs:
             elide-framework-v2-tests-${{ hashFiles('gradle/elide.versions.toml') }}
             elide-framework-v2-tests-
       - name: "Setup: GraalVM (Java 22)"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: "23"
diff --git a/.github/workflows/checks.detekt.yml b/.github/workflows/checks.detekt.yml
index a6a1f5583..e9de85f37 100644
--- a/.github/workflows/checks.detekt.yml
+++ b/.github/workflows/checks.detekt.yml
@@ -69,7 +69,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: "Setup: GraalVM (Java 22)"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: 23
diff --git a/.github/workflows/checks.formatting.yml b/.github/workflows/checks.formatting.yml
index 42686bf9b..16ad29948 100644
--- a/.github/workflows/checks.formatting.yml
+++ b/.github/workflows/checks.formatting.yml
@@ -92,7 +92,7 @@ jobs:
         with:
           bun-version-file: .bun-version
       - name: "Setup: GraalVM (Java 23)"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: "23"
diff --git a/.github/workflows/checks.qodana.yml b/.github/workflows/checks.qodana.yml
index 2ffec76e0..9b625147e 100644
--- a/.github/workflows/checks.qodana.yml
+++ b/.github/workflows/checks.qodana.yml
@@ -60,7 +60,7 @@ jobs:
         with:
           persist-credentials: false
       - name: "Setup: GraalVM (Java 22)"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: 23
diff --git a/.github/workflows/checks.sonar.yml b/.github/workflows/checks.sonar.yml
index f7e3060ac..3ec2566cf 100644
--- a/.github/workflows/checks.sonar.yml
+++ b/.github/workflows/checks.sonar.yml
@@ -76,7 +76,7 @@ jobs:
             elide-framework-v2-tests-${{ hashFiles('gradle/elide.versions.toml') }}
             elide-framework-v2-tests-
       - name: "Setup: GraalVM (Java 22)"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: 23
diff --git a/.github/workflows/job.bench.yml b/.github/workflows/job.bench.yml
index 10a099efb..2dae24ec6 100644
--- a/.github/workflows/job.bench.yml
+++ b/.github/workflows/job.bench.yml
@@ -76,7 +76,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
       - name: "Setup: GraalVM"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         if: ${{ matrix.engine == 'graalvm' }}
         with:
           distribution: "graalvm"
diff --git a/.github/workflows/job.build.yml b/.github/workflows/job.build.yml
index 5ad5f3d4e..2d526ece1 100644
--- a/.github/workflows/job.build.yml
+++ b/.github/workflows/job.build.yml
@@ -251,7 +251,7 @@ jobs:
           echo "SCCACHE_GHA_ENABLED=true" >> $GITHUB_ENV
           echo "RUSTC_WRAPPER=sccache" >> $GITHUB_ENV
       - name: "Setup: GraalVM (Java 23)"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: "23"
diff --git a/.github/workflows/job.cli.yml b/.github/workflows/job.cli.yml
index 88e2b643a..c08e8a970 100644
--- a/.github/workflows/job.cli.yml
+++ b/.github/workflows/job.cli.yml
@@ -185,7 +185,7 @@ jobs:
         with:
           arch: ${{ matrix.arch }}
       - name: "Setup: GraalVM (Java 23)"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: "23"
@@ -335,7 +335,7 @@ jobs:
         with:
           arch: ${{ matrix.arch }}
       - name: "Setup: GraalVM (Java 23)"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: "23"
diff --git a/.github/workflows/job.containers.yml b/.github/workflows/job.containers.yml
index 7e71e00be..df2433cf9 100644
--- a/.github/workflows/job.containers.yml
+++ b/.github/workflows/job.containers.yml
@@ -190,7 +190,7 @@ jobs:
       - name: "Setup: Buildless"
         uses: buildless/setup@30e82389418c7f17046606183bc4c78b2c8913e0 # v1.0.2
       - name: "Setup: GraalVM (Java 22)"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: "23"
@@ -302,7 +302,7 @@ jobs:
       - name: "Setup: Buildless"
         uses: buildless/setup@30e82389418c7f17046606183bc4c78b2c8913e0 # v1.0.2
       - name: "Setup: GraalVM (Java 22)"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: "23"
diff --git a/.github/workflows/job.site.yml b/.github/workflows/job.site.yml
index 9af41d347..541d929c4 100644
--- a/.github/workflows/job.site.yml
+++ b/.github/workflows/job.site.yml
@@ -53,7 +53,7 @@ jobs:
       - name: "Setup: Docker Buildx"
         uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
       - name: "Setup: GraalVM"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: 23
@@ -171,7 +171,7 @@ jobs:
       - name: "Setup: Docker Buildx"
         uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
       - name: "Setup: GraalVM"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           components: "native-image,js,wasm"
           distribution: "graalvm"
diff --git a/.github/workflows/job.test.yml b/.github/workflows/job.test.yml
index bfccb1b10..0f3359fdf 100644
--- a/.github/workflows/job.test.yml
+++ b/.github/workflows/job.test.yml
@@ -256,7 +256,7 @@ jobs:
           echo "SCCACHE_GHA_ENABLED=true" >> $GITHUB_ENV
           echo "RUSTC_WRAPPER=sccache" >> $GITHUB_ENV
       - name: "Setup: GraalVM (Java 23)"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: "23"
@@ -522,7 +522,7 @@ jobs:
           echo "SCCACHE_GHA_ENABLED=true" >> $GITHUB_ENV
           echo "RUSTC_WRAPPER=sccache" >> $GITHUB_ENV
       - name: "Setup: GraalVM (Java 22)"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: "23"
diff --git a/.github/workflows/on.scheduled.yml b/.github/workflows/on.scheduled.yml
index 4efc65d88..3742001c6 100644
--- a/.github/workflows/on.scheduled.yml
+++ b/.github/workflows/on.scheduled.yml
@@ -158,7 +158,7 @@ jobs:
           echo "SCCACHE_GHA_ENABLED=true" >> $GITHUB_ENV
           echo "RUSTC_WRAPPER=sccache" >> $GITHUB_ENV
       - name: "Setup: GraalVM (Java 22)"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: "23"
diff --git a/.github/workflows/publish.maven.yml b/.github/workflows/publish.maven.yml
index e676647c1..c2aeeee5b 100644
--- a/.github/workflows/publish.maven.yml
+++ b/.github/workflows/publish.maven.yml
@@ -189,7 +189,7 @@ jobs:
           version: 389.0.0
           project_id: elide-fw
       - name: "Setup: GraalVM"
-        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2
+        uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1.2.8
         with:
           distribution: "graalvm"
           java-version: 23