diff --git a/.github/workflows/action-validator.yaml b/.github/workflows/action-validator.yaml
index bff2395a..86f218f6 100644
--- a/.github/workflows/action-validator.yaml
+++ b/.github/workflows/action-validator.yaml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
         with:
           submodules: true
 
diff --git a/.github/workflows/agents-validate.yaml b/.github/workflows/agents-validate.yaml
index e7959d8a..8484e935 100644
--- a/.github/workflows/agents-validate.yaml
+++ b/.github/workflows/agents-validate.yaml
@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
         with:
           submodules: true
 
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 8a26e42b..3d279b45 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -56,7 +56,7 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6.0.3
+      uses: actions/checkout@v7.0.0
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/.github/workflows/dependabot-autobump.yaml b/.github/workflows/dependabot-autobump.yaml
index 10907bdf..7bb3cbd3 100644
--- a/.github/workflows/dependabot-autobump.yaml
+++ b/.github/workflows/dependabot-autobump.yaml
@@ -28,7 +28,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
         with:
           # Checkout the PR branch (head ref) not the target branch
           ref: ${{ github.event.pull_request.head.ref }}
diff --git a/.github/workflows/docs-bump.yaml b/.github/workflows/docs-bump.yaml
index 4c3e3627..fc56a0cf 100644
--- a/.github/workflows/docs-bump.yaml
+++ b/.github/workflows/docs-bump.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
 
       - name: Install yq
         uses: mikefarah/yq@v4.53.3
diff --git a/.github/workflows/go-coverage-report.yaml b/.github/workflows/go-coverage-report.yaml
index 51119617..7b138ed5 100644
--- a/.github/workflows/go-coverage-report.yaml
+++ b/.github/workflows/go-coverage-report.yaml
@@ -34,10 +34,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
 
       - name: Setup Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v6.4.0
         with:
           go-version: ^1.26
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4e95a6dc..69f3e026 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -42,7 +42,7 @@ jobs:
       generated_at: ${{ steps.meta.outputs.generated_at }}
     steps:
       - name: Checkout target
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0
           ref: ${{ github.event_name == 'workflow_dispatch' && (inputs.target_commitish != '' && inputs.target_commitish || github.sha) || github.sha }}
@@ -113,7 +113,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout candidate commit
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0
           ref: ${{ needs.preflight.outputs.target_sha }}
diff --git a/.github/workflows/static-checks.yaml b/.github/workflows/static-checks.yaml
index cdbfbbcd..6ee316bc 100644
--- a/.github/workflows/static-checks.yaml
+++ b/.github/workflows/static-checks.yaml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
 
       - name: Install shellcheck, shfmt, and zsh
         run: |
@@ -149,7 +149,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
 
       - name: Run actionlint
         uses: rhysd/actionlint@v1.7.12
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 40126970..e837373b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 
 ---
+## [0.1.40] - 2026-06-24
+### Changed
+- github actions update(deps): bump the version-updates group
+
 ## [0.1.39] - 2026-06-22
 ### Changed
 - gomod update(deps): bump the version-updates group
diff --git a/bsctl/static/resources/constants.yaml b/bsctl/static/resources/constants.yaml
index dc263639..fec6f6d3 100644
--- a/bsctl/static/resources/constants.yaml
+++ b/bsctl/static/resources/constants.yaml
@@ -1,2 +1,2 @@
 # BasicSetupCliVersion - constant for semantic versioning
-BasicSetupCliVersion: "0.1.39"
+BasicSetupCliVersion: "0.1.40"
diff --git a/resources/version.yaml b/resources/version.yaml
index 3a6cb192..8f6cb4b6 100644
--- a/resources/version.yaml
+++ b/resources/version.yaml
@@ -1,2 +1,2 @@
 # BasicSetupCliVersion - primary version source for releases and docs bump automation
-BasicSetupCliVersion: "0.1.39"
+BasicSetupCliVersion: "0.1.40"