diff --git a/.github/workflows/_cache.yml b/.github/workflows/_cache.yml
index aee8a916a4c2..1e6415022237 100644
--- a/.github/workflows/_cache.yml
+++ b/.github/workflows/_cache.yml
@@ -29,7 +29,7 @@ on:
 # For a job that does, you can restore with something like:
 #
 #    steps:
-#    - uses: envoyproxy/toolshed/gh-actions/docker/cache/restore@actions-v0.2.29
+#    - uses: envoyproxy/toolshed/gh-actions/docker/cache/restore@actions-v0.2.30
 #      with:
 #        key: "${{ needs.env.outputs.build-image }}"
 #
@@ -39,20 +39,20 @@ jobs:
   docker:
     runs-on: ubuntu-22.04
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.30
       id: appauth
       name: Appauth (mutex lock)
       with:
         app_id: ${{ secrets.app-id }}
         key: ${{ secrets.app-key }}
-    - uses: envoyproxy/toolshed/gh-actions/docker/cache/prime@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/docker/cache/prime@actions-v0.2.30
       id: docker
       name: Prime Docker cache (${{ inputs.image-tag }})
       with:
         image-tag: ${{ inputs.image-tag }}
         lock-token: ${{ steps.appauth.outputs.token }}
         lock-repository: ${{ inputs.lock-repository }}
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.30
       id: data
       name: Cache data
       with:
@@ -60,7 +60,7 @@ jobs:
         input: |
           cached: ${{ steps.docker.outputs.cached }}
           key: ${{ inputs.image-tag }}
-    - uses: envoyproxy/toolshed/gh-actions/json/table@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/json/table@actions-v0.2.30
       name: Summary
       with:
         json: ${{ steps.data.outputs.value }}
diff --git a/.github/workflows/_finish.yml b/.github/workflows/_finish.yml
index 8f3371c6b983..2230e5bdf1c3 100644
--- a/.github/workflows/_finish.yml
+++ b/.github/workflows/_finish.yml
@@ -36,7 +36,7 @@ jobs:
       actions: read
       contents: read
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.30
       name: Incoming data
       id: needs
       with:
@@ -87,7 +87,7 @@ jobs:
                    summary: "Check has finished",
                    text: $text}}}}
 
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.30
       name: Print summary
       with:
         input: ${{ toJSON(steps.needs.outputs.value).summary-title }}
@@ -95,13 +95,13 @@ jobs:
           "## \(.)"
         options: -Rr
         output-path: GITHUB_STEP_SUMMARY
-    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.30
       name: Appauth
       id: appauth
       with:
         app_id: ${{ secrets.app-id }}
         key: ${{ secrets.app-key }}
-    - uses: envoyproxy/toolshed/gh-actions/github/checks@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/github/checks@actions-v0.2.30
       name: Update check
       with:
         action: update
diff --git a/.github/workflows/_load.yml b/.github/workflows/_load.yml
index 26543c4e4d74..34b9a8518946 100644
--- a/.github/workflows/_load.yml
+++ b/.github/workflows/_load.yml
@@ -91,7 +91,7 @@ jobs:
     # Handle any failure in triggering job
     # Remove any `checks` we dont care about
     # Prepare a check request
-    - uses: envoyproxy/toolshed/gh-actions/github/env/load@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/github/env/load@actions-v0.2.30
       name: Load env
       id: data
       with:
@@ -102,13 +102,13 @@ jobs:
         GH_TOKEN: ${{ github.token }}
 
     #  Update the check
-    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.30
       name: Appauth
       id: appauth
       with:
         app_id: ${{ secrets.app-id }}
         key: ${{ secrets.app-key }}
-    - uses: envoyproxy/toolshed/gh-actions/github/checks@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/github/checks@actions-v0.2.30
       name: Update check
       if: ${{ fromJSON(steps.data.outputs.data).data.check.action == 'RUN' }}
       with:
@@ -116,7 +116,7 @@ jobs:
         checks: ${{ toJSON(fromJSON(steps.data.outputs.data).checks) }}
         token: ${{ steps.appauth.outputs.token }}
 
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.30
       name: Print request summary
       with:
         input: |
@@ -136,7 +136,7 @@ jobs:
           | $summary.summary as $summary
           | "${{ inputs.template-request-summary }}"
 
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.30
       id: request-output
       name: Load request
       with:
diff --git a/.github/workflows/_load_env.yml b/.github/workflows/_load_env.yml
index bcae0df70494..16035d4cc5d7 100644
--- a/.github/workflows/_load_env.yml
+++ b/.github/workflows/_load_env.yml
@@ -63,18 +63,18 @@ jobs:
       request: ${{ steps.env.outputs.data }}
       trusted: true
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.30
       id: started
       name: Create timestamp
       with:
         options: -r
         filter: |
           now
-    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.30
       id: checkout
       name: Checkout Envoy repository
     - name: Generate environment variables
-      uses: envoyproxy/toolshed/gh-actions/envoy/ci/env@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/envoy/ci/env@actions-v0.2.30
       id: env
       with:
         branch-name: ${{ inputs.branch-name }}
@@ -86,7 +86,7 @@ jobs:
 
     - name: Request summary
       id: summary
-      uses: envoyproxy/toolshed/gh-actions/github/env/summary@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/github/env/summary@actions-v0.2.30
       with:
         actor: ${{ toJSON(fromJSON(steps.env.outputs.data).request.actor) }}
         base-sha: ${{ fromJSON(steps.env.outputs.data).request.base-sha }}
diff --git a/.github/workflows/_request.yml b/.github/workflows/_request.yml
index 137cca31d7c7..a7e96ccc3620 100644
--- a/.github/workflows/_request.yml
+++ b/.github/workflows/_request.yml
@@ -40,14 +40,14 @@ jobs:
       env: ${{ steps.data.outputs.value }}
       config: ${{ steps.config.outputs.config }}
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.30
       id: started
       name: Create timestamp
       with:
         options: -r
         filter: |
           now
-    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.30
       id: checkout
       name: Checkout Envoy repository
       with:
@@ -60,7 +60,7 @@ jobs:
     # *ALL* variables collected should be treated as untrusted and should be sanitized before
     # use
     - name: Generate environment variables from commit
-      uses: envoyproxy/toolshed/gh-actions/envoy/ci/request@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/envoy/ci/request@actions-v0.2.30
       id: env
       with:
         branch-name: ${{ steps.checkout.outputs.branch-name }}
@@ -71,7 +71,7 @@ jobs:
         vars: ${{ toJSON(vars) }}
     - name: Request summary
       id: summary
-      uses: envoyproxy/toolshed/gh-actions/github/env/summary@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/github/env/summary@actions-v0.2.30
       with:
         actor: ${{ toJSON(fromJSON(steps.env.outputs.data).request.actor) }}
         base-sha: ${{ fromJSON(steps.env.outputs.data).request.base-sha }}
@@ -87,7 +87,7 @@ jobs:
         target-branch: ${{ fromJSON(steps.env.outputs.data).request.target-branch }}
 
     - name: Environment data
-      uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.30
       id: data
       with:
         input: |
diff --git a/.github/workflows/_run.yml b/.github/workflows/_run.yml
index f91520815a13..5c4d38e3507f 100644
--- a/.github/workflows/_run.yml
+++ b/.github/workflows/_run.yml
@@ -96,7 +96,7 @@ on:
       summary-post:
         type: string
         default: |
-          - uses: envoyproxy/toolshed/gh-actions/envoy/run/summary@actions-v0.2.29
+          - uses: envoyproxy/toolshed/gh-actions/envoy/run/summary@actions-v0.2.30
             with:
               context: %{{ inputs.context }}
       steps-pre:
@@ -158,7 +158,7 @@ jobs:
     name: ${{ inputs.command }} ${{ inputs.target }}
     timeout-minutes: ${{ inputs.timeout-minutes }}
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.30
       id: started
       name: Create timestamp
       with:
@@ -166,7 +166,7 @@ jobs:
         filter: |
           now
     # This controls which input vars are exposed to the run action (and related steps)
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.30
       name: Context
       id: context
       with:
@@ -187,11 +187,11 @@ jobs:
           | . * {$config, $check}
     - if: ${{ inputs.cache-build-image }}
       name: Restore Docker cache ${{ inputs.cache-build-image && format('({0})', inputs.cache-build-image) || '' }}
-      uses: envoyproxy/toolshed/gh-actions/docker/cache/restore@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/docker/cache/restore@actions-v0.2.30
       with:
         image_tag: ${{ inputs.cache-build-image }}
 
-    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.30
       id: appauth
       name: Appauth
       if: ${{ inputs.trusted }}
@@ -202,7 +202,7 @@ jobs:
         # - the workaround is to allow the token to be passed through.
         token: ${{ github.token }}
         token-ok: true
-    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.30
       id: checkout
       name: Checkout Envoy repository
       with:
@@ -219,7 +219,7 @@ jobs:
         token: ${{ inputs.trusted && steps.appauth.outputs.token || github.token }}
 
     # This is currently only use by mobile-docs and can be removed once they are updated to the newer website
-    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.30
       id: checkout-extra
       name: Checkout extra repository (for publishing)
       if: ${{ inputs.checkout-extra }}
@@ -227,7 +227,7 @@ jobs:
         config: ${{ inputs.checkout-extra }}
         ssh-key: ${{ inputs.trusted && inputs.ssh-key-extra || '' }}
 
-    - uses: envoyproxy/toolshed/gh-actions/github/run@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/github/run@actions-v0.2.30
       name: Run CI ${{ inputs.command }} ${{ inputs.target }}
       with:
         args: ${{ inputs.args != '--' && inputs.args || inputs.target }}
diff --git a/.github/workflows/_stage_publish.yml b/.github/workflows/_stage_publish.yml
index e844009bb7ad..a4ee1262c87f 100644
--- a/.github/workflows/_stage_publish.yml
+++ b/.github/workflows/_stage_publish.yml
@@ -63,7 +63,7 @@ jobs:
             export ENVOY_PUBLISH_DRY_RUN=${{ (fromJSON(inputs.request).request.version.dev || ! inputs.trusted) && 1 || '' }}
           steps-pre: |
             - id: url
-              uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.29
+              uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.30
               with:
                 options: -Rr
                 input: >-
@@ -80,7 +80,7 @@ jobs:
                     end
                   | . as $bucket
                   | "https://storage.googleapis.com/\($bucket)/\($sha)/\($path)"
-            - uses: envoyproxy/toolshed/gh-actions/fetch@actions-v0.2.29
+            - uses: envoyproxy/toolshed/gh-actions/fetch@actions-v0.2.30
               with:
                 url: %{{ steps.url.outputs.value }}
                 path: %{{ runner.temp }}/release.signed
@@ -98,12 +98,12 @@ jobs:
     needs:
     - publish
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.30
       id: appauth
       with:
         app_id: ${{ secrets.ENVOY_CI_SYNC_APP_ID }}
         key: ${{ secrets.ENVOY_CI_SYNC_APP_KEY }}
-    - uses: envoyproxy/toolshed/gh-actions/dispatch@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/dispatch@actions-v0.2.30
       with:
         ref: main
         repository: ${{ fromJSON(inputs.request).request.version.dev && 'envoyproxy/envoy-website' || 'envoyproxy/archive' }}
diff --git a/.github/workflows/_stage_verify.yml b/.github/workflows/_stage_verify.yml
index 170bbcb6db8b..1cb5595e8a6e 100644
--- a/.github/workflows/_stage_verify.yml
+++ b/.github/workflows/_stage_verify.yml
@@ -50,7 +50,7 @@ jobs:
           rbe: false
           steps-pre: |
             - id: url
-              uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.29
+              uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.30
               with:
                 options: -Rr
                 input: >-
@@ -66,15 +66,15 @@ jobs:
                     end
                   | . as $bucket
                   | "https://storage.googleapis.com/\($bucket)/\($sha)"
-            - uses: envoyproxy/toolshed/gh-actions/docker/fetch@actions-v0.2.29
+            - uses: envoyproxy/toolshed/gh-actions/docker/fetch@actions-v0.2.30
               with:
                 url: %{{ steps.url.outputs.value }}/docker/envoy.tar
                 variant: dev
-            - uses: envoyproxy/toolshed/gh-actions/docker/fetch@actions-v0.2.29
+            - uses: envoyproxy/toolshed/gh-actions/docker/fetch@actions-v0.2.30
               with:
                 url: %{{ steps.url.outputs.value }}/docker/envoy-contrib.tar
                 variant: contrib-dev
-            - uses: envoyproxy/toolshed/gh-actions/docker/fetch@actions-v0.2.29
+            - uses: envoyproxy/toolshed/gh-actions/docker/fetch@actions-v0.2.30
               with:
                 url: %{{ steps.url.outputs.value }}/docker/envoy-google-vrp.tar
                 variant: google-vrp-dev
diff --git a/.github/workflows/_start.yml b/.github/workflows/_start.yml
index 74e0c1c3b132..8c7ba167d0a5 100644
--- a/.github/workflows/_start.yml
+++ b/.github/workflows/_start.yml
@@ -54,7 +54,7 @@ jobs:
   start:
     runs-on: ubuntu-22.04
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.2.30
       id: check-config
       name: Prepare check data
       with:
@@ -77,13 +77,13 @@ jobs:
           | .skipped.output.summary = "${{ inputs.skipped-summary }}"
           | .skipped.output.text = ""
 
-    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.30
       name: Appauth
       id: appauth
       with:
         app_id: ${{ secrets.app-id }}
         key: ${{ secrets.app-key }}
-    - uses: envoyproxy/toolshed/gh-actions/github/checks@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/github/checks@actions-v0.2.30
       name: Start checks
       id: checks
       with:
@@ -94,7 +94,7 @@ jobs:
 
           ${{ fromJSON(inputs.env).summary.summary }}
         token: ${{ steps.appauth.outputs.token }}
-    - uses: envoyproxy/toolshed/gh-actions/json/table@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/json/table@actions-v0.2.30
       name: Summary
       with:
         collapse-open: true
@@ -118,7 +118,7 @@ jobs:
         output-path: GITHUB_STEP_SUMMARY
         title: Checks started/skipped
 
-    - uses: envoyproxy/toolshed/gh-actions/github/env/save@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/github/env/save@actions-v0.2.30
       name: Save env
       id: data
       with:
diff --git a/.github/workflows/codeql-daily.yml b/.github/workflows/codeql-daily.yml
index 69b073e10b3f..9de6d6786fa0 100644
--- a/.github/workflows/codeql-daily.yml
+++ b/.github/workflows/codeql-daily.yml
@@ -30,7 +30,7 @@ jobs:
       uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633  # v4.1.2
 
     - name: Free disk space
-      uses: envoyproxy/toolshed/gh-actions/diskspace@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/diskspace@actions-v0.2.30
       with:
         to_remove: |
           /usr/local/lib/android
diff --git a/.github/workflows/codeql-push.yml b/.github/workflows/codeql-push.yml
index 33cf60738682..2cdebddd5234 100644
--- a/.github/workflows/codeql-push.yml
+++ b/.github/workflows/codeql-push.yml
@@ -61,7 +61,7 @@ jobs:
 
     - name: Free disk space
       if: ${{ env.BUILD_TARGETS != '' }}
-      uses: envoyproxy/toolshed/gh-actions/diskspace@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/diskspace@actions-v0.2.30
       with:
         to_remove: |
           /usr/local/lib/android
diff --git a/.github/workflows/command.yml b/.github/workflows/command.yml
index fcc29c2c2c48..cc59d5ceefe4 100644
--- a/.github/workflows/command.yml
+++ b/.github/workflows/command.yml
@@ -28,7 +28,7 @@ jobs:
          && github.actor != 'dependabot[bot]'
       }}
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/github/command@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/github/command@actions-v0.2.30
       name: Parse command from comment
       id: command
       with:
@@ -37,14 +37,14 @@ jobs:
           ^/(retest)
 
     # /retest
-    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.30
       if: ${{ steps.command.outputs.command == 'retest' }}
       id: appauth-retest
       name: Appauth (retest)
       with:
         key: ${{ secrets.ENVOY_CI_APP_KEY }}
         app_id: ${{ secrets.ENVOY_CI_APP_ID }}
-    - uses: envoyproxy/toolshed/gh-actions/retest@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/retest@actions-v0.2.30
       if: ${{ steps.command.outputs.command == 'retest' }}
       name: Retest
       with:
diff --git a/.github/workflows/envoy-dependency.yml b/.github/workflows/envoy-dependency.yml
index c5d3d1587687..2ae678c4c820 100644
--- a/.github/workflows/envoy-dependency.yml
+++ b/.github/workflows/envoy-dependency.yml
@@ -50,16 +50,16 @@ jobs:
     steps:
     - id: appauth
       name: Appauth
-      uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.30
       with:
         app_id: ${{ secrets.ENVOY_CI_DEP_APP_ID }}
         key: ${{ secrets.ENVOY_CI_DEP_APP_KEY }}
     - id: checkout
       name: Checkout Envoy repository
-      uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.30
       with:
         token: ${{ steps.appauth.outputs.token }}
-    - uses: envoyproxy/toolshed/gh-actions/bson@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/bson@actions-v0.2.30
       id: update
       name: Update dependency (${{ inputs.dependency }})
       with:
@@ -94,13 +94,13 @@ jobs:
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-    - uses: envoyproxy/toolshed/gh-actions/upload/diff@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/upload/diff@actions-v0.2.30
       name: Upload diff
       with:
         name: ${{ inputs.dependency }}-${{ steps.update.outputs.output }}
     - name: Create a PR
       if: ${{ inputs.pr }}
-      uses: envoyproxy/toolshed/gh-actions/github/pr@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/github/pr@actions-v0.2.30
       with:
         base: main
         body: |
@@ -131,11 +131,11 @@ jobs:
     steps:
     - id: appauth
       name: Appauth
-      uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.30
       with:
         app_id: ${{ secrets.ENVOY_CI_DEP_APP_ID }}
         key: ${{ secrets.ENVOY_CI_DEP_APP_KEY }}
-    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.30
       id: checkout
       name: Checkout Envoy repository
       with:
@@ -177,7 +177,7 @@ jobs:
 
     - name: Check Docker SHAs
       id: build-images
-      uses: envoyproxy/toolshed/gh-actions/docker/shas@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/docker/shas@actions-v0.2.30
       with:
         images: |
            sha: envoyproxy/envoy-build-ubuntu:${{ steps.build-tools.outputs.tag }}
@@ -206,7 +206,7 @@ jobs:
       name: Update SHAs
       working-directory: envoy
     - name: Create a PR
-      uses: envoyproxy/toolshed/gh-actions/github/pr@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/github/pr@actions-v0.2.30
       with:
         base: main
         body: Created by Envoy dependency bot
diff --git a/.github/workflows/envoy-release.yml b/.github/workflows/envoy-release.yml
index f7bdc57b274c..00351f8304f9 100644
--- a/.github/workflows/envoy-release.yml
+++ b/.github/workflows/envoy-release.yml
@@ -55,14 +55,14 @@ jobs:
     steps:
     - id: appauth
       name: App auth
-      uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.30
       with:
         app_id: ${{ secrets.ENVOY_CI_PUBLISH_APP_ID }}
         key: ${{ secrets.ENVOY_CI_PUBLISH_APP_KEY }}
 
     - id: checkout
       name: Checkout Envoy repository
-      uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.30
       with:
         committer-name: ${{ env.COMMITTER_NAME }}
         committer-email: ${{ env.COMMITTER_EMAIL }}
@@ -83,10 +83,10 @@ jobs:
       name: Check changelog summary
     - if: ${{ inputs.author }}
       name: Validate signoff email
-      uses: envoyproxy/toolshed/gh-actions/email/validate@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/email/validate@actions-v0.2.30
       with:
         email: ${{ inputs.author }}
-    - uses: envoyproxy/toolshed/gh-actions/github/run@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/github/run@actions-v0.2.30
       name: Create release
       with:
         source: |
@@ -111,7 +111,7 @@ jobs:
       name: Release version
       id: release
     - name: Create a PR
-      uses: envoyproxy/toolshed/gh-actions/github/pr@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/github/pr@actions-v0.2.30
       with:
         base: ${{ github.ref_name }}
         commit: false
@@ -136,20 +136,20 @@ jobs:
     steps:
     - id: appauth
       name: App auth
-      uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.30
       with:
         app_id: ${{ secrets.ENVOY_CI_PUBLISH_APP_ID }}
         key: ${{ secrets.ENVOY_CI_PUBLISH_APP_KEY }}
 
     - id: checkout
       name: Checkout Envoy repository
-      uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.30
       with:
         committer-name: ${{ env.COMMITTER_NAME }}
         committer-email: ${{ env.COMMITTER_EMAIL }}
         strip-prefix: release/
         token: ${{ steps.appauth.outputs.token }}
-    - uses: envoyproxy/toolshed/gh-actions/github/run@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/github/run@actions-v0.2.30
       name: Sync version histories
       with:
         command: >-
@@ -159,7 +159,7 @@ jobs:
           --
           --signoff="${{ env.COMMITTER_NAME }} <${{ env.COMMITTER_EMAIL }}>"
     - name: Create a PR
-      uses: envoyproxy/toolshed/gh-actions/github/pr@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/github/pr@actions-v0.2.30
       with:
         append-commit-message: true
         base: ${{ github.ref_name }}
@@ -189,13 +189,13 @@ jobs:
     steps:
     - id: appauth
       name: App auth
-      uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.30
       with:
         app_id: ${{ secrets.ENVOY_CI_PUBLISH_APP_ID }}
         key: ${{ secrets.ENVOY_CI_PUBLISH_APP_KEY }}
 
     - name: Checkout repository
-      uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.2.30
       with:
         committer-name: ${{ env.COMMITTER_NAME }}
         committer-email: ${{ env.COMMITTER_EMAIL }}
diff --git a/.github/workflows/envoy-sync.yml b/.github/workflows/envoy-sync.yml
index 7e8bbc4522f3..b98f5a82ad3a 100644
--- a/.github/workflows/envoy-sync.yml
+++ b/.github/workflows/envoy-sync.yml
@@ -31,12 +31,12 @@ jobs:
         - data-plane-api
         - mobile-website
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.2.30
       id: appauth
       with:
         app_id: ${{ secrets.ENVOY_CI_SYNC_APP_ID }}
         key: ${{ secrets.ENVOY_CI_SYNC_APP_KEY }}
-    - uses: envoyproxy/toolshed/gh-actions/dispatch@actions-v0.2.29
+    - uses: envoyproxy/toolshed/gh-actions/dispatch@actions-v0.2.30
       with:
         repository: "envoyproxy/${{ matrix.downstream }}"
         ref: main
diff --git a/.github/workflows/garbage.yml b/.github/workflows/garbage.yml
index d16786c891e1..9ea291ab8419 100644
--- a/.github/workflows/garbage.yml
+++ b/.github/workflows/garbage.yml
@@ -33,7 +33,7 @@ jobs:
           pool-id: 17
     steps:
     - name: Remove dead AZP agents (${{ matrix.target }})
-      uses: envoyproxy/toolshed/gh-actions/azp/agent-cleanup@actions-v0.2.29
+      uses: envoyproxy/toolshed/gh-actions/azp/agent-cleanup@actions-v0.2.30
       with:
         azp-org: cncf
         azp-token: ${{ secrets.AZP_TOKEN }}
diff --git a/.github/workflows/mobile-android_build.yml b/.github/workflows/mobile-android_build.yml
index 5ad3ddcc7686..509ba5eebac5 100644
--- a/.github/workflows/mobile-android_build.yml
+++ b/.github/workflows/mobile-android_build.yml
@@ -75,9 +75,9 @@ jobs:
       target: kotlin-hello-world
       runs-on: envoy-x64-small
       steps-pre: |
-        - uses: envoyproxy/toolshed/gh-actions/envoy/android/pre@actions-v0.2.29
+        - uses: envoyproxy/toolshed/gh-actions/envoy/android/pre@actions-v0.2.30
       steps-post: |
-        - uses: envoyproxy/toolshed/gh-actions/envoy/android/post@actions-v0.2.29
+        - uses: envoyproxy/toolshed/gh-actions/envoy/android/post@actions-v0.2.30
           with:
             apk: bazel-bin/examples/kotlin/hello_world/hello_envoy_kt.apk
             app: io.envoyproxy.envoymobile.helloenvoykotlin/.MainActivity
@@ -104,7 +104,7 @@ jobs:
       target: ${{ matrix.target }}
       runs-on: envoy-x64-small
       steps-pre: |
-        - uses: envoyproxy/toolshed/gh-actions/envoy/android/pre@actions-v0.2.29
+        - uses: envoyproxy/toolshed/gh-actions/envoy/android/pre@actions-v0.2.30
       steps-post: ${{ matrix.steps-post }}
       timeout-minutes: 50
       trusted: ${{ fromJSON(needs.load.outputs.trusted) }}
@@ -115,7 +115,7 @@ jobs:
         include:
         - name: java-hello-world
           steps-post: |
-            - uses: envoyproxy/toolshed/gh-actions/envoy/android/post@actions-v0.2.29
+            - uses: envoyproxy/toolshed/gh-actions/envoy/android/post@actions-v0.2.30
               with:
                 apk: bazel-bin/examples/java/hello_world/hello_envoy.apk
                 app: io.envoyproxy.envoymobile.helloenvoy/.MainActivity
@@ -134,7 +134,7 @@ jobs:
             --config=mobile-remote-release-clang-android
             //test/kotlin/apps/baseline:hello_envoy_kt
           steps-post: |
-            - uses: envoyproxy/toolshed/gh-actions/envoy/android/post@actions-v0.2.29
+            - uses: envoyproxy/toolshed/gh-actions/envoy/android/post@actions-v0.2.30
               with:
                 apk: bazel-bin/test/kotlin/apps/baseline/hello_envoy_kt.apk
                 app: io.envoyproxy.envoymobile.helloenvoybaselinetest/.MainActivity
@@ -149,7 +149,7 @@ jobs:
             --config=mobile-remote-release-clang-android
             //test/kotlin/apps/experimental:hello_envoy_kt
           steps-post: |
-            - uses: envoyproxy/toolshed/gh-actions/envoy/android/post@actions-v0.2.29
+            - uses: envoyproxy/toolshed/gh-actions/envoy/android/post@actions-v0.2.30
               with:
                 apk: bazel-bin/test/kotlin/apps/experimental/hello_envoy_kt.apk
                 app: io.envoyproxy.envoymobile.helloenvoyexperimentaltest/.MainActivity
diff --git a/.github/workflows/mobile-ios_build.yml b/.github/workflows/mobile-ios_build.yml
index 2328cd92a4ef..a9ed28375056 100644
--- a/.github/workflows/mobile-ios_build.yml
+++ b/.github/workflows/mobile-ios_build.yml
@@ -86,7 +86,7 @@ jobs:
         source ./ci/mac_ci_setup.sh
         ./bazelw shutdown
       steps-post: |
-        - uses: envoyproxy/toolshed/gh-actions/envoy/ios/post@actions-v0.2.29
+        - uses: envoyproxy/toolshed/gh-actions/envoy/ios/post@actions-v0.2.30
           with:
             app: ${{ matrix.app }}
             args: ${{ matrix.args || '--config=mobile-remote-ci-macos-ios' }}
@@ -130,7 +130,7 @@ jobs:
       source: |
         source ./ci/mac_ci_setup.sh
       steps-post: |
-        - uses: envoyproxy/toolshed/gh-actions/envoy/ios/post@actions-v0.2.29
+        - uses: envoyproxy/toolshed/gh-actions/envoy/ios/post@actions-v0.2.30
           with:
             app: ${{ matrix.app }}
             args: ${{ matrix.args || '--config=mobile-remote-ci-macos-ios' }}
diff --git a/api/bazel/repository_locations.bzl b/api/bazel/repository_locations.bzl
index ccb229e2ee5d..cfc5fcf93b2b 100644
--- a/api/bazel/repository_locations.bzl
+++ b/api/bazel/repository_locations.bzl
@@ -177,12 +177,12 @@ REPOSITORY_LOCATIONS_SPEC = dict(
         project_name = "envoy_toolshed",
         project_desc = "Tooling, libraries, runners and checkers for Envoy proxy's CI",
         project_url = "https://github.com/envoyproxy/toolshed",
-        version = "0.1.2",
-        sha256 = "d3139c43a0097d694e86cd61690b596528ad874ef7a11e42bed932a96bc44618",
+        version = "0.1.3",
+        sha256 = "ee6d0b08ae3d9659f5fc34d752578af195147b153f8ca68eb4f8530aceb764d9",
         strip_prefix = "toolshed-bazel-v{version}/bazel",
         urls = ["https://github.com/envoyproxy/toolshed/archive/bazel-v{version}.tar.gz"],
         use_category = ["build"],
-        release_date = "2024-03-21",
+        release_date = "2024-04-16",
         cpe = "N/A",
         license = "Apache-2.0",
         license_url = "https://github.com/envoyproxy/envoy/blob/bazel-v{version}/LICENSE",