diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 0000000..2d706e7
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,4 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["github>launchdarkly/gh-actions//renovate/sdk-python"]
+}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c6d988e..572a329 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -42,13 +42,29 @@ jobs:
         run: make start-contract-test-service-bg
 
       - name: run SSE contract tests
-        run: make run-contract-tests
+        uses: launchdarkly/gh-actions/actions/contract-tests@contract-tests-v1
+        with:
+          repo: sse-contract-tests
+          branch: main
+          version: v2
+          test_service_port: 8000
+          enable_persistence_tests: "false"
+          debug_logging: "true"
+          token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: start async SSE contract test service
         run: make start-async-contract-test-service-bg
 
       - name: run async SSE contract tests
-        run: make run-async-contract-tests
+        uses: launchdarkly/gh-actions/actions/contract-tests@contract-tests-v1
+        with:
+          repo: sse-contract-tests
+          branch: main
+          version: v2
+          test_service_port: 8001
+          enable_persistence_tests: "false"
+          debug_logging: "true"
+          token: ${{ secrets.GITHUB_TOKEN }}
 
   windows:
     runs-on: windows-latest
diff --git a/.github/workflows/manual-publish.yml b/.github/workflows/manual-publish.yml
index 29cb5c7..b2646f3 100644
--- a/.github/workflows/manual-publish.yml
+++ b/.github/workflows/manual-publish.yml
@@ -32,6 +32,6 @@ jobs:
 
       - name: Publish package distributions to PyPI
         if: ${{ inputs.dry_run == false }}
-        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
         with:
           password: ${{env.PYPI_AUTH_TOKEN}}
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index a042a59..5fc23cb 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -42,6 +42,6 @@ jobs:
 
       - name: Publish package distributions to PyPI
         if: ${{ steps.release.outputs.releases_created == 'true' }}
-        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
         with:
           password: ${{env.PYPI_AUTH_TOKEN}}