diff --git a/.github/workflows/alex.yml b/.github/workflows/alex.yml
index 885b42d..ef42a7a 100644
--- a/.github/workflows/alex.yml
+++ b/.github/workflows/alex.yml
@@ -7,9 +7,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4.1.0
+      - uses: actions/checkout@v4.1.1
       - name: Use Node.js
-        uses: actions/setup-node@v3.8.1
+        uses: actions/setup-node@v4.0.0
         with:
           node-version: 12.x
 
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 58709d7..0f0ff31 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -6,8 +6,8 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.0
-      - uses: actions/setup-node@v3.8.1
+      - uses: actions/checkout@v4.1.1
+      - uses: actions/setup-node@v4.0.0
         with:
           cache: yarn
 
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 11c3a0f..980b2fb 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -19,7 +19,7 @@ jobs:
       contents: read
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v4.1.0
+        uses: actions/checkout@v4.1.1
 
       - name: Log in to Docker Hub
         uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d
@@ -36,14 +36,14 @@ jobs:
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934
+        uses: docker/metadata-action@e6428a5c4e294a61438ed7f43155db912025b6b3
         with:
           images: |
             ${{ secrets.DOCKERHUB_USERNAME }}/hurs
             ghcr.io/${{ github.repository }}
 
       - name: Build and push Docker images
-        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09
+        uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
         with:
           context: .
           push: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index aa4e615..9b3f321 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,7 +9,7 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: google-github-actions/release-please-action@v3.7.12
+      - uses: google-github-actions/release-please-action@v4.0.0
         with:
           release-type: node
           package-name: release-please-action
diff --git a/.github/workflows/spell.yml b/.github/workflows/spell.yml
index 2b4999b..e51eb4d 100644
--- a/.github/workflows/spell.yml
+++ b/.github/workflows/spell.yml
@@ -7,5 +7,5 @@ jobs:
   spellcheck: # run the action
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.0
-      - uses: streetsidesoftware/cspell-action@v3.1.0
+      - uses: actions/checkout@v4.1.1
+      - uses: streetsidesoftware/cspell-action@v5.0.1
diff --git a/.github/workflows/yarn-upgrader.yml b/.github/workflows/yarn-upgrader.yml
index d65f48f..0021389 100644
--- a/.github/workflows/yarn-upgrader.yml
+++ b/.github/workflows/yarn-upgrader.yml
@@ -9,9 +9,9 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.0
+      - uses: actions/checkout@v4.1.1
 
-      - uses: actions/setup-node@v3.8.1
+      - uses: actions/setup-node@v4.0.0
         with:
           node-version: 19.x