diff --git a/.copier-answers.yml b/.copier-answers.yml
index 26270ea..c26477a 100644
--- a/.copier-answers.yml
+++ b/.copier-answers.yml
@@ -1,5 +1,5 @@
 # Do NOT update manually; changes here will be overwritten by Copier
-_commit: v1.44
+_commit: v1.47
 _src_path: git+https://github.com/OCA/oca-addons-repo-template
 additional_ruff_rules: []
 convert_readme_fragments_to_markdown: true
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 6a6d788..a0cb45e 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -18,15 +18,15 @@ jobs:
   pre-commit:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.12"
           cache: 'pip'
           cache-dependency-path: '.pre-commit-config.yaml'
       - name: Get python version
         run: echo "PY=$(python -VV | sha256sum | cut -d' ' -f1)" >> $GITHUB_ENV
-      - uses: actions/cache@v4
+      - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.cache/pre-commit
           key: pre-commit|${{ env.PY }}|${{ hashFiles('.pre-commit-config.yaml') }}
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index fa17fcd..87c9da5 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Stale PRs and issues policy
-        uses: actions/stale@v9
+        uses: actions/stale@4391f3da665fdf50b6810c1a66712fb9ba21aa93 # v11.0.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           # General settings.
@@ -48,7 +48,7 @@ jobs:
       # * Issues that are pending more information
       # * Except Issues marked as "no stale"
       - name: Needs more information stale issues policy
-        uses: actions/stale@v9
+        uses: actions/stale@4391f3da665fdf50b6810c1a66712fb9ba21aa93 # v11.0.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           ascending: true
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index e11aa97..e9d1005 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Detect unreleased dependencies
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - run: |
           for reqfile in requirements.txt test-requirements.txt ; do
               if [ -f ${reqfile} ] ; then
@@ -56,7 +56,7 @@ jobs:
     env:
       OCA_ENABLE_CHECKLOG_ODOO: "1"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: Install addons and dependencies
@@ -70,13 +70,13 @@ jobs:
       - name: Run tests
         run: oca_run_tests
       - name: Upload screenshots from JS tests
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: ${{ failure() }}
         with:
           name: Screenshots of failed JS tests - ${{ matrix.name }}${{ join(matrix.include) }}
           path: /tmp/odoo_tests/${{ env.PGDATABASE }}
           if-no-files-found: ignore
-      - uses: codecov/codecov-action@v4
+      - uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
       - name: Update .pot files
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 5133278..189d7d9 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -48,7 +48,7 @@ repos:
     hooks:
       - id: whool-init
   - repo: https://github.com/oca/maintainer-tools
-    rev: 31bdbd8e4cb94be6534f0e82b1cafb84a455f671
+    rev: b8311a95009805a6e5593f0390f52c0fa350117f
     hooks:
       # update the NOT INSTALLABLE ADDONS section above
       - id: oca-update-pre-commit-excluded-addons
@@ -68,6 +68,8 @@ repos:
     rev: v0.1.7
     hooks:
       - id: oca-checks-odoo-module
+        args:
+          - --fix
       - id: oca-checks-po
         args:
           - --disable=po-pretty-format
@@ -128,7 +130,7 @@ repos:
         args: [--fix, --exit-non-zero-on-fix]
       - id: ruff-format
   - repo: https://github.com/OCA/pylint-odoo
-    rev: v10.0.6
+    rev: v10.0.8
     hooks:
       - id: pylint_odoo
         name: pylint with optional checks
diff --git a/.pylintrc b/.pylintrc
index 87713c8..6e7ca6b 100644
--- a/.pylintrc
+++ b/.pylintrc
@@ -75,6 +75,7 @@ enable=anomalous-backslash-in-string,
     category-allowed,
     deprecated-name-get,
     deprecated-odoo-model-method,
+    deprecated-self-cr,
     inheritable-method-lambda,
     inheritable-method-string,
     invalid-email,
diff --git a/.pylintrc-mandatory b/.pylintrc-mandatory
index 8018b57..18694fe 100644
--- a/.pylintrc-mandatory
+++ b/.pylintrc-mandatory
@@ -67,6 +67,7 @@ enable=anomalous-backslash-in-string,
     category-allowed,
     deprecated-name-get,
     deprecated-odoo-model-method,
+    deprecated-self-cr,
     inheritable-method-lambda,
     inheritable-method-string,
     invalid-email,
diff --git a/checklog-odoo.cfg b/checklog-odoo.cfg
index 58d43aa..0cc7d64 100644
--- a/checklog-odoo.cfg
+++ b/checklog-odoo.cfg
@@ -3,3 +3,4 @@ ignore=
     WARNING.* 0 failed, 0 error\(s\).*
     WARNING .* Killing chrome descendants-or-self .*
     WARNING.* Missing widget: res_partner_many2one for field of type many2one.*
+    (?ms)WARNING.* odoo.addons.base.models.assetsbundle: Error: argument `[$]color` of `rgba[(][$]color, [$]alpha[)]` must be a color.*odoo/addons/web/static/lib/bootstrap/scss/mixins/_buttons.scss, in mixin `button-outline-variant`.*