diff --git a/.github/workflows/alex.yml b/.github/workflows/alex.yml
index ef42a7a..3fc3e9d 100644
--- a/.github/workflows/alex.yml
+++ b/.github/workflows/alex.yml
@@ -7,9 +7,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.6
       - name: Use Node.js
-        uses: actions/setup-node@v4.0.0
+        uses: actions/setup-node@v4.0.2
         with:
           node-version: 12.x
 
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 0f0ff31..0c87c9f 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -6,8 +6,8 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
-      - uses: actions/setup-node@v4.0.0
+      - uses: actions/checkout@v4.1.6
+      - uses: actions/setup-node@v4.0.2
         with:
           cache: yarn
 
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 980b2fb..8b38547 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -19,16 +19,16 @@ jobs:
       contents: read
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v4.1.1
+        uses: actions/checkout@v4.1.6
 
       - name: Log in to Docker Hub
-        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d
+        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_PASSWORD }}
 
       - name: Log in to the Container registry
-        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d
+        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -36,14 +36,14 @@ jobs:
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@e6428a5c4e294a61438ed7f43155db912025b6b3
+        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
         with:
           images: |
             ${{ secrets.DOCKERHUB_USERNAME }}/hurs
             ghcr.io/${{ github.repository }}
 
       - name: Build and push Docker images
-        uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
+        uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0
         with:
           context: .
           push: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9b3f321..0f3f661 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,7 +9,7 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: google-github-actions/release-please-action@v4.0.0
+      - uses: google-github-actions/release-please-action@v4.1.1
         with:
           release-type: node
           package-name: release-please-action
diff --git a/.github/workflows/spell.yml b/.github/workflows/spell.yml
index e51eb4d..16a0574 100644
--- a/.github/workflows/spell.yml
+++ b/.github/workflows/spell.yml
@@ -7,5 +7,5 @@ jobs:
   spellcheck: # run the action
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
-      - uses: streetsidesoftware/cspell-action@v5.0.1
+      - uses: actions/checkout@v4.1.6
+      - uses: streetsidesoftware/cspell-action@v6.3.0
diff --git a/.github/workflows/yarn-upgrader.yml b/.github/workflows/yarn-upgrader.yml
index 0021389..56247ae 100644
--- a/.github/workflows/yarn-upgrader.yml
+++ b/.github/workflows/yarn-upgrader.yml
@@ -9,9 +9,9 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.6
 
-      - uses: actions/setup-node@v4.0.0
+      - uses: actions/setup-node@v4.0.2
         with:
           node-version: 19.x
 
@@ -32,7 +32,7 @@ jobs:
 
       # Open a pull request if there are any changes
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v5.0.2
+        uses: peter-evans/create-pull-request@v6.0.5
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           branch: update/yarn-upgrade