diff --git a/.github/workflows/build-images.yml b/.github/workflows/build-images.yml
index 82865c08..d567ba4b 100644
--- a/.github/workflows/build-images.yml
+++ b/.github/workflows/build-images.yml
@@ -117,7 +117,7 @@ jobs:
 
             - name: Build image using Camunda docker build
               id: build-image-step
-              uses: camunda/infra-global-github-actions/build-docker-image@3232e9983af5e05ea446e2cdc3bbaffd4b300e5c # main
+              uses: camunda/infra-global-github-actions/build-docker-image@d77000545c7ea9403f90bf2eedbe052ff9656873 # main
               with:
                   registry_host: ${{ vars.CONTAINER_REGISTRY_CI }}
                   registry_username: ${{ steps.secrets.outputs.MACHINE_USR }}
@@ -506,7 +506,7 @@ jobs:
               uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
             - name: Install if required common software tooling
-              uses: camunda/infra-global-github-actions/common-tooling@3232e9983af5e05ea446e2cdc3bbaffd4b300e5c # main
+              uses: camunda/infra-global-github-actions/common-tooling@d77000545c7ea9403f90bf2eedbe052ff9656873 # main
               with:
                   node-enabled: false
                   java-enabled: false
@@ -606,7 +606,7 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: Retrigger job
-              uses: camunda/infra-global-github-actions/rerun-failed-run@3232e9983af5e05ea446e2cdc3bbaffd4b300e5c # main
+              uses: camunda/infra-global-github-actions/rerun-failed-run@d77000545c7ea9403f90bf2eedbe052ff9656873 # main
               with:
                   error-messages: |
                       lost communication with the server
@@ -631,7 +631,7 @@ jobs:
         steps:
             - name: Notify in Slack in case of failure
               id: slack-notification
-              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@c5aabcb89fbaca9143d940fc21bfc39723f3c0ca # 1.2.9
+              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@08c796604f9b08614df763b333833dd1bdc037c0 # 1.2.11
               with:
                   vault_addr: ${{ secrets.VAULT_ADDR }}
                   vault_role_id: ${{ secrets.VAULT_ROLE_ID }}
diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index 1b1c8bc9..0dc92f52 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -46,7 +46,7 @@ jobs:
             - name: Notify in Slack in case of failure
               id: slack-notification
               if: failure() && github.event_name == 'schedule'
-              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@c5aabcb89fbaca9143d940fc21bfc39723f3c0ca # 1.2.9
+              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@08c796604f9b08614df763b333833dd1bdc037c0 # 1.2.11
               with:
                   vault_addr: ${{ secrets.VAULT_ADDR }}
                   vault_role_id: ${{ secrets.VAULT_ROLE_ID }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index f0ec89a0..4cf71ebd 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -9,5 +9,5 @@ on:
 
 jobs:
     lint:
-        uses: camunda/infraex-common-config/.github/workflows/lint-global.yml@c5aabcb89fbaca9143d940fc21bfc39723f3c0ca # 1.2.9
+        uses: camunda/infraex-common-config/.github/workflows/lint-global.yml@08c796604f9b08614df763b333833dd1bdc037c0 # 1.2.11
         secrets: inherit
diff --git a/.github/workflows/renovate-automerge.yml b/.github/workflows/renovate-automerge.yml
index e2cec5e0..64ed3324 100644
--- a/.github/workflows/renovate-automerge.yml
+++ b/.github/workflows/renovate-automerge.yml
@@ -11,5 +11,5 @@ concurrency:
 
 jobs:
     renovate-automerge:
-        uses: camunda/infraex-common-config/.github/workflows/automerge-global.yml@c5aabcb89fbaca9143d940fc21bfc39723f3c0ca # 1.2.9
+        uses: camunda/infraex-common-config/.github/workflows/automerge-global.yml@08c796604f9b08614df763b333833dd1bdc037c0 # 1.2.11
         secrets: inherit
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 91cafa1d..7231cef9 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -1,7 +1,7 @@
 ---
 repos:
     - repo: https://github.com/camunda/infraex-common-config
-      rev: 1.2.9 # use tags until renovate supports sha: https://github.com/renovatebot/renovate/issues/22567
+      rev: 1.2.11 # use tags until renovate supports sha: https://github.com/renovatebot/renovate/issues/22567
       hooks:
           - id: update-action-readmes-docker
 
diff --git a/.tool-versions b/.tool-versions
index 72c9a057..0284f35f 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -13,7 +13,7 @@
 # check it with
 # diff <(sed '/^#/d; /^$/d' .tool-versions | sort) <(sed '/^#/d; /^$/d' .tool-versions) && echo ".tool-versions is sorted correctly" || echo ".tool-versions is not sorted correctly"
 
-awscli 2.22.28
+awscli 2.22.33
 
 just 1.38.0