diff --git a/.github/actions/docker-image/action.yml b/.github/actions/docker-image/action.yml
index 69430546d..136f9d377 100644
--- a/.github/actions/docker-image/action.yml
+++ b/.github/actions/docker-image/action.yml
@@ -26,7 +26,7 @@ runs:
         format: sarif
         output: results.sarif
     - name: Upload Trivy scan results to GitHub Security tab
-      uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+      uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
       with:
         sarif_file: results.sarif
         category: "${{ inputs.image }}"
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index 70205142a..8446528ca 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -49,7 +49,7 @@ jobs:
       contents: read
       models: read
       issues: write
-    uses: electrocucaracha/gh-workflows/.github/workflows/linter.yml@e171e202dcee30a16fc1b8fb67f22c2e9ea3a06d # v12.0.1
+    uses: electrocucaracha/gh-workflows/.github/workflows/linter.yml@8f0fa8c0acf90de07569a66d774498c3101d235f # v12.1.1
     with:
       validate_overrides: |-
         {
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 3fc4d3fd3..69d08f3a3 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -58,7 +58,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: true
-      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
+      - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2
         with:
           enable-cache: true
           python-version: ${{ matrix.python_version }}
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index a04d6100c..87a14711e 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -37,7 +37,7 @@ repos:
     hooks:
       - id: yamlfmt
   - repo: https://github.com/electrocucaracha/ai-prepare-commit-msg
-    rev: v20.3.7
+    rev: v20.6.1
     hooks:
       - id: ai-prepare-commit
         stages:
diff --git a/requirements/2025.1/debian_12.txt b/requirements/2025.1/debian_12.txt
index fa83071b3..a90a4ecaa 100644
--- a/requirements/2025.1/debian_12.txt
+++ b/requirements/2025.1/debian_12.txt
@@ -8,15 +8,15 @@ bcrypt==4.3.0
     # via
     #   kolla-ansible
     #   passlib
-certifi==2026.7.22
+certifi==2026.10.23
     # via requests
 cffi==2.1.1
     # via cryptography
 charset-normalizer==3.5.2
     # via requests
-cliff==4.16.0
+cliff==4.17.0
     # via kolla-ansible
-cmd2==4.2.4
+cmd2==4.3.1
     # via cliff
 cryptography==50.0.2
     # via
@@ -70,7 +70,7 @@ prompt-toolkit==3.0.53
     # via cmd2
 psutil==7.2.2
     # via oslo-utils
-pycparser==3.11
+pycparser==3.12
     # via cffi
 pygments==2.21.0
     # via rich
@@ -98,7 +98,7 @@ rich==15.0.0
     #   rich-argparse
 rich-argparse==1.8.0
     # via cmd2
-setuptools==84.0.0
+setuptools==84.2.1
     # via pbr
 stevedore==5.9.1
     # via
@@ -106,7 +106,7 @@ stevedore==5.9.1
     #   oslo-config
 urllib3==2.8.0
     # via requests
-wcwidth==0.9.2
+wcwidth==0.9.4
     # via
     #   prettytable
     #   prompt-toolkit
diff --git a/requirements/2025.1/rocky_9.txt b/requirements/2025.1/rocky_9.txt
index f61e9b086..7c467edd1 100644
--- a/requirements/2025.1/rocky_9.txt
+++ b/requirements/2025.1/rocky_9.txt
@@ -8,15 +8,15 @@ bcrypt==4.3.0
     # via
     #   kolla-ansible
     #   passlib
-certifi==2026.7.22
+certifi==2026.10.23
     # via requests
 cffi==2.1.1
     # via cryptography
 charset-normalizer==3.5.2
     # via requests
-cliff==4.16.0
+cliff==4.17.0
     # via kolla-ansible
-cmd2==4.2.4
+cmd2==4.3.1
     # via cliff
 cryptography==50.0.2
     # via
@@ -70,7 +70,7 @@ prompt-toolkit==3.0.53
     # via cmd2
 psutil==7.2.2
     # via oslo-utils
-pycparser==3.11
+pycparser==3.12
     # via cffi
 pygments==2.21.0
     # via rich
@@ -98,7 +98,7 @@ rich==15.0.0
     #   rich-argparse
 rich-argparse==1.8.0
     # via cmd2
-setuptools==84.0.0
+setuptools==84.2.1
     # via pbr
 stevedore==5.9.1
     # via
@@ -106,7 +106,7 @@ stevedore==5.9.1
     #   oslo-config
 urllib3==2.8.0
     # via requests
-wcwidth==0.9.2
+wcwidth==0.9.4
     # via
     #   prettytable
     #   prompt-toolkit
diff --git a/requirements/2025.1/ubuntu_24.txt b/requirements/2025.1/ubuntu_24.txt
index 03144f71b..a0b0743b0 100644
--- a/requirements/2025.1/ubuntu_24.txt
+++ b/requirements/2025.1/ubuntu_24.txt
@@ -8,15 +8,15 @@ bcrypt==4.3.0
     # via
     #   kolla-ansible
     #   passlib
-certifi==2026.7.22
+certifi==2026.10.23
     # via requests
 cffi==2.1.1
     # via cryptography
 charset-normalizer==3.5.2
     # via requests
-cliff==4.16.0
+cliff==4.17.0
     # via kolla-ansible
-cmd2==4.3.0
+cmd2==4.3.1
     # via cliff
 cryptography==50.0.2
     # via
@@ -70,7 +70,7 @@ prompt-toolkit==3.0.53
     # via cmd2
 psutil==7.2.2
     # via oslo-utils
-pycparser==3.11
+pycparser==3.12
     # via cffi
 pygments==2.21.0
     # via rich
@@ -98,7 +98,7 @@ rich==15.0.0
     #   rich-argparse
 rich-argparse==1.8.0
     # via cmd2
-setuptools==84.0.0
+setuptools==84.2.1
     # via pbr
 stevedore==5.9.1
     # via
@@ -106,7 +106,7 @@ stevedore==5.9.1
     #   oslo-config
 urllib3==2.8.0
     # via requests
-wcwidth==0.9.2
+wcwidth==0.9.4
     # via
     #   prettytable
     #   prompt-toolkit
diff --git a/requirements/2025.2/debian_12.txt b/requirements/2025.2/debian_12.txt
index 5075e8a6f..46271629e 100644
--- a/requirements/2025.2/debian_12.txt
+++ b/requirements/2025.2/debian_12.txt
@@ -8,15 +8,15 @@ bcrypt==4.3.0
     # via
     #   kolla-ansible
     #   passlib
-certifi==2026.7.22
+certifi==2026.10.23
     # via requests
 cffi==2.1.1
     # via cryptography
 charset-normalizer==3.5.2
     # via requests
-cliff==4.16.0
+cliff==4.17.0
     # via kolla-ansible
-cmd2==4.3.0
+cmd2==4.3.1
     # via cliff
 cryptography==50.0.2
     # via
@@ -70,7 +70,7 @@ prompt-toolkit==3.0.53
     # via cmd2
 psutil==7.2.2
     # via oslo-utils
-pycparser==3.11
+pycparser==3.12
     # via cffi
 pygments==2.21.0
     # via rich
@@ -98,7 +98,7 @@ rich==15.0.0
     #   rich-argparse
 rich-argparse==1.8.0
     # via cmd2
-setuptools==84.0.0
+setuptools==84.2.1
     # via pbr
 stevedore==5.9.1
     # via
@@ -106,7 +106,7 @@ stevedore==5.9.1
     #   oslo-config
 urllib3==2.8.0
     # via requests
-wcwidth==0.9.2
+wcwidth==0.9.4
     # via
     #   prettytable
     #   prompt-toolkit
diff --git a/requirements/2025.2/rocky_10.txt b/requirements/2025.2/rocky_10.txt
index 756f21c40..819468e97 100644
--- a/requirements/2025.2/rocky_10.txt
+++ b/requirements/2025.2/rocky_10.txt
@@ -8,15 +8,15 @@ bcrypt==4.3.0
     # via
     #   kolla-ansible
     #   passlib
-certifi==2026.7.22
+certifi==2026.10.23
     # via requests
 cffi==2.1.1
     # via cryptography
 charset-normalizer==3.5.2
     # via requests
-cliff==4.16.0
+cliff==4.17.0
     # via kolla-ansible
-cmd2==4.3.0
+cmd2==4.3.1
     # via cliff
 cryptography==50.0.2
     # via
@@ -70,7 +70,7 @@ prompt-toolkit==3.0.53
     # via cmd2
 psutil==7.2.2
     # via oslo-utils
-pycparser==3.11
+pycparser==3.12
     # via cffi
 pygments==2.21.0
     # via rich
@@ -98,7 +98,7 @@ rich==15.0.0
     #   rich-argparse
 rich-argparse==1.8.0
     # via cmd2
-setuptools==84.0.0
+setuptools==84.2.1
     # via pbr
 stevedore==5.9.1
     # via
@@ -106,7 +106,7 @@ stevedore==5.9.1
     #   oslo-config
 urllib3==2.8.0
     # via requests
-wcwidth==0.9.2
+wcwidth==0.9.4
     # via
     #   prettytable
     #   prompt-toolkit
diff --git a/requirements/2025.2/ubuntu_24.txt b/requirements/2025.2/ubuntu_24.txt
index b23547dbd..72936bd15 100644
--- a/requirements/2025.2/ubuntu_24.txt
+++ b/requirements/2025.2/ubuntu_24.txt
@@ -8,15 +8,15 @@ bcrypt==4.3.0
     # via
     #   kolla-ansible
     #   passlib
-certifi==2026.7.22
+certifi==2026.10.23
     # via requests
 cffi==2.1.1
     # via cryptography
 charset-normalizer==3.5.2
     # via requests
-cliff==4.16.0
+cliff==4.17.0
     # via kolla-ansible
-cmd2==4.3.0
+cmd2==4.3.1
     # via cliff
 cryptography==50.0.2
     # via
@@ -70,7 +70,7 @@ prompt-toolkit==3.0.53
     # via cmd2
 psutil==7.2.2
     # via oslo-utils
-pycparser==3.11
+pycparser==3.12
     # via cffi
 pygments==2.21.0
     # via rich
@@ -98,7 +98,7 @@ rich==15.0.0
     #   rich-argparse
 rich-argparse==1.8.0
     # via cmd2
-setuptools==84.0.0
+setuptools==84.2.1
     # via pbr
 stevedore==5.9.1
     # via
@@ -106,7 +106,7 @@ stevedore==5.9.1
     #   oslo-config
 urllib3==2.8.0
     # via requests
-wcwidth==0.9.2
+wcwidth==0.9.4
     # via
     #   prettytable
     #   prompt-toolkit
diff --git a/requirements/2026.1/debian_13.txt b/requirements/2026.1/debian_13.txt
index 36a1ee779..0c78e9164 100644
--- a/requirements/2026.1/debian_13.txt
+++ b/requirements/2026.1/debian_13.txt
@@ -6,15 +6,15 @@ autopage==0.6.0
     # via cliff
 bcrypt==5.0.0
     # via kolla-ansible
-certifi==2026.7.22
+certifi==2026.10.23
     # via requests
 cffi==2.1.1
     # via cryptography
 charset-normalizer==3.5.2
     # via requests
-cliff==4.16.0
+cliff==4.17.0
     # via kolla-ansible
-cmd2==4.3.0
+cmd2==4.3.1
     # via cliff
 cryptography==50.0.2
     # via
@@ -66,7 +66,7 @@ prompt-toolkit==3.0.53
     # via cmd2
 psutil==7.2.2
     # via oslo-utils
-pycparser==3.11
+pycparser==3.12
     # via cffi
 pygments==2.21.0
     # via rich
@@ -94,7 +94,7 @@ rich==15.0.0
     #   rich-argparse
 rich-argparse==1.8.0
     # via cmd2
-setuptools==84.0.0
+setuptools==84.2.1
     # via pbr
 stevedore==5.9.1
     # via
@@ -102,7 +102,7 @@ stevedore==5.9.1
     #   oslo-config
 urllib3==2.8.0
     # via requests
-wcwidth==0.9.2
+wcwidth==0.9.4
     # via
     #   prettytable
     #   prompt-toolkit
diff --git a/requirements/2026.1/rocky_10.txt b/requirements/2026.1/rocky_10.txt
index 9fc9821ff..9def9e915 100644
--- a/requirements/2026.1/rocky_10.txt
+++ b/requirements/2026.1/rocky_10.txt
@@ -6,15 +6,15 @@ autopage==0.6.0
     # via cliff
 bcrypt==5.0.0
     # via kolla-ansible
-certifi==2026.7.22
+certifi==2026.10.23
     # via requests
 cffi==2.1.1
     # via cryptography
 charset-normalizer==3.5.2
     # via requests
-cliff==4.16.0
+cliff==4.17.0
     # via kolla-ansible
-cmd2==4.3.0
+cmd2==4.3.1
     # via cliff
 cryptography==50.0.2
     # via
@@ -66,7 +66,7 @@ prompt-toolkit==3.0.53
     # via cmd2
 psutil==7.2.2
     # via oslo-utils
-pycparser==3.11
+pycparser==3.12
     # via cffi
 pygments==2.21.0
     # via rich
@@ -94,7 +94,7 @@ rich==15.0.0
     #   rich-argparse
 rich-argparse==1.8.0
     # via cmd2
-setuptools==84.0.0
+setuptools==84.2.1
     # via pbr
 stevedore==5.9.1
     # via
@@ -102,7 +102,7 @@ stevedore==5.9.1
     #   oslo-config
 urllib3==2.8.0
     # via requests
-wcwidth==0.9.2
+wcwidth==0.9.4
     # via
     #   prettytable
     #   prompt-toolkit
diff --git a/requirements/2026.1/ubuntu_24.txt b/requirements/2026.1/ubuntu_24.txt
index 3ba82408c..a42e590f6 100644
--- a/requirements/2026.1/ubuntu_24.txt
+++ b/requirements/2026.1/ubuntu_24.txt
@@ -6,15 +6,15 @@ autopage==0.6.0
     # via cliff
 bcrypt==5.0.0
     # via kolla-ansible
-certifi==2026.7.22
+certifi==2026.10.23
     # via requests
 cffi==2.1.1
     # via cryptography
 charset-normalizer==3.5.2
     # via requests
-cliff==4.16.0
+cliff==4.17.0
     # via kolla-ansible
-cmd2==4.3.0
+cmd2==4.3.1
     # via cliff
 cryptography==50.0.2
     # via
@@ -66,7 +66,7 @@ prompt-toolkit==3.0.53
     # via cmd2
 psutil==7.2.2
     # via oslo-utils
-pycparser==3.11
+pycparser==3.12
     # via cffi
 pygments==2.21.0
     # via rich
@@ -94,7 +94,7 @@ rich==15.0.0
     #   rich-argparse
 rich-argparse==1.8.0
     # via cmd2
-setuptools==84.0.0
+setuptools==84.2.1
     # via pbr
 stevedore==5.9.1
     # via
@@ -102,7 +102,7 @@ stevedore==5.9.1
     #   oslo-config
 urllib3==2.8.0
     # via requests
-wcwidth==0.9.2
+wcwidth==0.9.4
     # via
     #   prettytable
     #   prompt-toolkit