diff --git a/.github/workflows/changeset.yaml b/.github/workflows/changeset.yaml
index 1c6d0ac6..ba134106 100644
--- a/.github/workflows/changeset.yaml
+++ b/.github/workflows/changeset.yaml
@@ -22,12 +22,12 @@ jobs:
       NPM_CONFIG_PROVENANCE: true
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
 
       - name: Use Node.js 24
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 24 # NPM 11.5.1+ required for OIDC trusted publishing
           cache: yarn
diff --git a/.github/workflows/native_build.yaml b/.github/workflows/native_build.yaml
index 3b337147..06134298 100644
--- a/.github/workflows/native_build.yaml
+++ b/.github/workflows/native_build.yaml
@@ -13,15 +13,15 @@ jobs:
   android-compile:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: set up JDK 17
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
         with:
           java-version: '17'
-          distribution: 'adopt'
+          distribution: 'temurin'
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22
           cache: 'yarn'
@@ -54,9 +54,9 @@ jobs:
   ios-compile:
     runs-on: macos-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22
           cache: 'yarn'
diff --git a/.github/workflows/pinact_update.yaml b/.github/workflows/pinact_update.yaml
index ddb08f20..529e85c5 100644
--- a/.github/workflows/pinact_update.yaml
+++ b/.github/workflows/pinact_update.yaml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Install aqua (installs pinact)
         uses: aquaproj/aqua-installer@96a9bc20066c5bf5e275b41019cfc165b25f4e2e # v4.0.5
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 4226875f..cfc185d3 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -13,9 +13,9 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22
 
diff --git a/.pinact.yaml b/.pinact.yaml
new file mode 100644
index 00000000..a6d989b5
--- /dev/null
+++ b/.pinact.yaml
@@ -0,0 +1,8 @@
+version: 3
+
+ignore_actions:
+  # changesets/action v2 requires @changesets/cli v3 and renames the
+  # `version`/`publish` inputs. Hold v1.9.0 until the repo migrates to
+  # Changesets v3; remove this entry as part of that migration.
+  - name: changesets/action
+    ref: a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d
diff --git a/typedoc.json b/typedoc.json
index d3412a31..20258508 100644
--- a/typedoc.json
+++ b/typedoc.json
@@ -16,6 +16,7 @@
         "java",
         "kotlin",
         "objc",
+        "python",
         "ruby",
         "swift",
         "xml"