diff --git a/.github/workflows/build-images.yml b/.github/workflows/build-images.yml
index 08c87263..2fbd0fc7 100644
--- a/.github/workflows/build-images.yml
+++ b/.github/workflows/build-images.yml
@@ -107,7 +107,7 @@ jobs:
 
             - name: Build image using Camunda docker build
               id: build-image-step
-              uses: camunda/infra-global-github-actions/build-docker-image@3079b98f4deaa2c944ee16b70e375cb957aadcdf # main
+              uses: camunda/infra-global-github-actions/build-docker-image@f9362c30ae191d18ed4d38665a2a010762a02583 # main
               with:
                   registry_host: ${{ vars.CONTAINER_REGISTRY_CI }}
                   registry_username: ${{ steps.secrets.outputs.MACHINE_USR }}
@@ -476,7 +476,7 @@ jobs:
               uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
             - name: Install if required common software tooling
-              uses: camunda/infra-global-github-actions/common-tooling@3079b98f4deaa2c944ee16b70e375cb957aadcdf # main
+              uses: camunda/infra-global-github-actions/common-tooling@f9362c30ae191d18ed4d38665a2a010762a02583 # main
               with:
                   node-enabled: false
                   java-enabled: false
@@ -566,7 +566,7 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: Retrigger job
-              uses: camunda/infra-global-github-actions/rerun-failed-run@3079b98f4deaa2c944ee16b70e375cb957aadcdf # main
+              uses: camunda/infra-global-github-actions/rerun-failed-run@f9362c30ae191d18ed4d38665a2a010762a02583 # main
               with:
                   error-messages: |
                       lost communication with the server
@@ -591,7 +591,7 @@ jobs:
         steps:
             - name: Notify in Slack in case of failure
               id: slack-notification
-              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@d809dbc4cd95c04cb3a00fc043aa31ef6b590515 # 1.2.7
+              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@2723815da46088717a7b73c199aa005d8d5b27a1 # 1.2.8
               with:
                   vault_addr: ${{ secrets.VAULT_ADDR }}
                   vault_role_id: ${{ secrets.VAULT_ROLE_ID }}
diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index 4312bcd6..d9ebf73f 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -46,7 +46,7 @@ jobs:
             - name: Notify in Slack in case of failure
               id: slack-notification
               if: failure() && github.event_name == 'schedule'
-              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@d809dbc4cd95c04cb3a00fc043aa31ef6b590515 # 1.2.7
+              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@2723815da46088717a7b73c199aa005d8d5b27a1 # 1.2.8
               with:
                   vault_addr: ${{ secrets.VAULT_ADDR }}
                   vault_role_id: ${{ secrets.VAULT_ROLE_ID }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 7c770082..0c1d4cee 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -9,5 +9,5 @@ on:
 
 jobs:
     lint:
-        uses: camunda/infraex-common-config/.github/workflows/lint-global.yml@d809dbc4cd95c04cb3a00fc043aa31ef6b590515 # 1.2.7
+        uses: camunda/infraex-common-config/.github/workflows/lint-global.yml@2723815da46088717a7b73c199aa005d8d5b27a1 # 1.2.8
         secrets: inherit
diff --git a/.github/workflows/renovate-automerge.yml b/.github/workflows/renovate-automerge.yml
index b5562242..4b1ff9b8 100644
--- a/.github/workflows/renovate-automerge.yml
+++ b/.github/workflows/renovate-automerge.yml
@@ -11,5 +11,5 @@ concurrency:
 
 jobs:
     renovate-automerge:
-        uses: camunda/infraex-common-config/.github/workflows/automerge-global.yml@d809dbc4cd95c04cb3a00fc043aa31ef6b590515 # 1.2.7
+        uses: camunda/infraex-common-config/.github/workflows/automerge-global.yml@2723815da46088717a7b73c199aa005d8d5b27a1 # 1.2.8
         secrets: inherit
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 6c9b324b..990dd35b 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -1,7 +1,7 @@
 ---
 repos:
     - repo: https://github.com/camunda/infraex-common-config
-      rev: 1.2.7 # use tags until renovate supports sha: https://github.com/renovatebot/renovate/issues/22567
+      rev: 1.2.8 # use tags until renovate supports sha: https://github.com/renovatebot/renovate/issues/22567
       hooks:
           - id: update-action-readmes-docker
 
diff --git a/.tool-versions b/.tool-versions
index ab941385..438cd0a4 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -13,7 +13,7 @@
 # check it with
 # diff <(sed '/^#/d; /^$/d' .tool-versions | sort) <(sed '/^#/d; /^$/d' .tool-versions) && echo ".tool-versions is sorted correctly" || echo ".tool-versions is not sorted correctly"
 
-awscli 2.22.12
+awscli 2.22.17
 
 just 1.38.0