diff --git a/.github/workflows/formatting.yml b/.github/workflows/formatting.yml
index 76c201a..999b92b 100644
--- a/.github/workflows/formatting.yml
+++ b/.github/workflows/formatting.yml
@@ -9,7 +9,7 @@ jobs:
   lint:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: setup apt dependencies
         run: |
diff --git a/.github/workflows/validate_anaklasis.yml b/.github/workflows/validate_anaklasis.yml
index 10d13f3..eb31fe9 100644
--- a/.github/workflows/validate_anaklasis.yml
+++ b/.github/workflows/validate_anaklasis.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: setup apt dependencies
         run: |
diff --git a/.github/workflows/validate_bornagain.yml b/.github/workflows/validate_bornagain.yml
index 2e82998..ed3e56c 100644
--- a/.github/workflows/validate_bornagain.yml
+++ b/.github/workflows/validate_bornagain.yml
@@ -17,7 +17,7 @@ jobs:
       max-parallel: 3
 
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: setup apt dependencies
       run: |
diff --git a/.github/workflows/validate_genx.yml b/.github/workflows/validate_genx.yml
index 30ab41b..8763ebc 100644
--- a/.github/workflows/validate_genx.yml
+++ b/.github/workflows/validate_genx.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: setup apt dependencies
         run: |
diff --git a/.github/workflows/validate_nistweb.yml b/.github/workflows/validate_nistweb.yml
index ea83b28..c5e525d 100644
--- a/.github/workflows/validate_nistweb.yml
+++ b/.github/workflows/validate_nistweb.yml
@@ -15,12 +15,12 @@ jobs:
     runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
       - name: Set up Python
-        uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: '3.13'
       - name: setup apt dependencies
diff --git a/.github/workflows/validate_refl1d.yml b/.github/workflows/validate_refl1d.yml
index 336f64c..a3045db 100644
--- a/.github/workflows/validate_refl1d.yml
+++ b/.github/workflows/validate_refl1d.yml
@@ -15,11 +15,11 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
-          python-version: '3.10'
+          python-version: '3.13'
 
       - name: Install Python packages
         run: |
diff --git a/.github/workflows/validate_refnx.yml b/.github/workflows/validate_refnx.yml
index ba507ad..24833ca 100644
--- a/.github/workflows/validate_refnx.yml
+++ b/.github/workflows/validate_refnx.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-24.04
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: setup apt dependencies
         run: |
diff --git a/.github/workflows/zenodo.yml b/.github/workflows/zenodo.yml
index 7da336a..92eac76 100644
--- a/.github/workflows/zenodo.yml
+++ b/.github/workflows/zenodo.yml
@@ -11,7 +11,7 @@ jobs:
     name: Create Release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set release date
         id: date
@@ -19,7 +19,7 @@ jobs:
           echo "RELEASE_DATE=$(date '+%Y-%m-%d-%H-%M-%S')" >> $GITHUB_ENV
 
       - name: Create Release
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
diff --git a/validation/scripts/test_bornagain.py b/validation/scripts/test_bornagain.py
index 6ec82a9..64d641e 100644
--- a/validation/scripts/test_bornagain.py
+++ b/validation/scripts/test_bornagain.py
@@ -32,7 +32,9 @@ def get_sample(slabs):
         #     double maxSpatFrequency=0.5
         #   ) -> SelfAffineFractalModel
 
-        r_autocorr = ba.SelfAffineFractalModel(slab[3] * angstrom, 1.0, 1000 * nm)
+        r_autocorr = ba.SelfAffineFractalModel(
+            slab[3] * angstrom, 1.0, 1000 * nm
+        )
         roughness = ba.Roughness(r_autocorr, transient)
         layer = ba.Layer(material, slab[0] * angstrom, roughness)
 
@@ -40,7 +42,9 @@ def get_sample(slabs):
 
     substrate = ba.MaterialBySLD("msub", slabs[-1, 1] * 1e-6, 0)
 
-    r_autocorr = ba.SelfAffineFractalModel(slabs[-1, 3] * angstrom, 1.0, 1000 * nm)
+    r_autocorr = ba.SelfAffineFractalModel(
+        slabs[-1, 3] * angstrom, 1.0, 1000 * nm
+    )
 
     roughness = ba.Roughness(r_autocorr, transient)
     layer = ba.Layer(substrate, roughness)