diff --git a/.github/actions/az-keyvault-get/action.yml b/.github/actions/az-keyvault-get/action.yml
index c389cf00..22e088d5 100644
--- a/.github/actions/az-keyvault-get/action.yml
+++ b/.github/actions/az-keyvault-get/action.yml
@@ -71,7 +71,7 @@ runs:
     using: composite
     steps:
         - name: Azure KeyVault get Value
-          uses: azure/cli@089eac9d8cc39f5d003e94f8b65efc51076c9cbd # v2.1.0
+          uses: azure/cli@9eb25b8360668fb0ecbafa808d40e2197b2f5f52 # v3.0.0
           id: GetAzKeyVaultSecret
           with:
               inlineScript: |
diff --git a/.github/actions/az-login/action.yml b/.github/actions/az-login/action.yml
index ad89dc32..892e5a18 100644
--- a/.github/actions/az-login/action.yml
+++ b/.github/actions/az-login/action.yml
@@ -43,7 +43,7 @@ runs:
     using: composite
     steps:
         - name: Azure DevOps Login
-          uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0
+          uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43 # v3.0.0
           with:
               client-id: ${{ inputs.client-id }}
               tenant-id: ${{ inputs.tenant-id }}
diff --git a/.github/actions/validate-pr-labels/action.yml b/.github/actions/validate-pr-labels/action.yml
index 94e2801e..83ea94f5 100644
--- a/.github/actions/validate-pr-labels/action.yml
+++ b/.github/actions/validate-pr-labels/action.yml
@@ -29,13 +29,13 @@ runs:
   using: composite
   steps:
     - name: Check PR has at least one type of PR label
-      uses: mheap/github-action-required-labels@fb29a14a076b0f74099f6198f77750e8fc236016 #v5.5.0
+      uses: mheap/github-action-required-labels@23e10fde7e062233401931a0eece796cd9bf3177 #v5.6.0
       with:
         mode: minimum
         count: 1
         labels: 'feature, bug, bugfix, dependencies, dependency, chore'
     - name: "Check PR does not have a 'do not merge' label"
-      uses: mheap/github-action-required-labels@fb29a14a076b0f74099f6198f77750e8fc236016 #v5.5.0
+      uses: mheap/github-action-required-labels@23e10fde7e062233401931a0eece796cd9bf3177 #v5.6.0
       with:
         mode: exactly
         count: 0
diff --git a/.github/actions/validate-pr-title/action.yml b/.github/actions/validate-pr-title/action.yml
index abf533c9..eff72610 100644
--- a/.github/actions/validate-pr-title/action.yml
+++ b/.github/actions/validate-pr-title/action.yml
@@ -37,7 +37,17 @@ runs:
   using: composite
   steps:
     - name: "Check PR title follows '${{ inputs.validate-semVer == true && '+semver: <minor|major|patch> ' || '' }}<ticket id> <description>'"
-      uses: deepakputhraya/action-pr-title@3864bebc79c5f829d25dd42d3c6579d040b0ef16 #v1.0.2
-      with:
-        regex: ^${{ inputs.validate-semVer == true && '(\+semver:\s(minor|major|patch)\s)?' || '' }}([A-Z][A-Z0-9]*-\d+(:)?\s\w)
       if: ${{ contains(github.head_ref, 'release/') == false && contains(github.head_ref, 'merge/') == false }}
+      shell: bash
+      env:
+        GH_TOKEN: ${{ github.token }}
+        PR_NUMBER: ${{ github.event.pull_request.number }}
+        REPO: ${{ github.repository }}
+        SEMVER_PREFIX: ${{ inputs.validate-semVer == true && '(\+semver:\s(minor|major|patch)\s)?' || '' }}
+      run: |
+        TITLE=$(gh pr view "$PR_NUMBER" --repo "$REPO" --json title --jq '.title')
+        REGEX="^${SEMVER_PREFIX}([A-Z][A-Z0-9]*-[0-9]+(:)?\s\w)"
+        if ! echo "$TITLE" | grep -Pq "$REGEX"; then
+          echo "::error::Pull Request title \"$TITLE\" failed to pass match regex - $REGEX"
+          exit 1
+        fi