diff --git a/.github/workflows/labeler.yaml b/.github/workflows/labeler.yaml
index 6d907972912..6145616804c 100644
--- a/.github/workflows/labeler.yaml
+++ b/.github/workflows/labeler.yaml
@@ -9,7 +9,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/labeler@v4
+    - uses: actions/labeler@v5
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"
         sync-labels: "true"
diff --git a/.github/workflows/macos-quick.yaml b/.github/workflows/macos-quick.yaml
index acbf31577ca..3ac75847b93 100644
--- a/.github/workflows/macos-quick.yaml
+++ b/.github/workflows/macos-quick.yaml
@@ -8,12 +8,12 @@ jobs:
   macos-quick:
     runs-on: macos-latest
     steps:
-      - uses: actions/setup-go@v3
+      - uses: actions/setup-go@v5
         with:
           go-version: "1.18.x"
 
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Install squashfs from homebrew
         run: |
diff --git a/.github/workflows/naming.yml b/.github/workflows/naming.yml
index 63f644fcd5c..bffbdfa7544 100644
--- a/.github/workflows/naming.yml
+++ b/.github/workflows/naming.yml
@@ -7,11 +7,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
-      - uses: tj-actions/changed-files@v41.0.0
+      - uses: tj-actions/changed-files@v45.0.5
         id: files
 
       - name: woke
diff --git a/.github/workflows/spread-tests.yaml b/.github/workflows/spread-tests.yaml
index 69d908b61d1..f276b2c4497 100644
--- a/.github/workflows/spread-tests.yaml
+++ b/.github/workflows/spread-tests.yaml
@@ -108,7 +108,7 @@ jobs:
 
     - name: Get changed files
       id: changed-files
-      uses: tj-actions/changed-files@v41.0.0
+      uses: tj-actions/changed-files@v45.0.5
 
     - name: Save changes files
       run: |
diff --git a/.github/workflows/static-checks.yaml b/.github/workflows/static-checks.yaml
index 8406b9dbb62..5269104e8ce 100644
--- a/.github/workflows/static-checks.yaml
+++ b/.github/workflows/static-checks.yaml
@@ -61,7 +61,7 @@ jobs:
 
     - name: Get changed files
       id: changed-files
-      uses: tj-actions/changed-files@v41.0.0
+      uses: tj-actions/changed-files@v45.0.5
       with:
         path: ./
 
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 34040783595..a10bf81c0e2 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -253,7 +253,7 @@ jobs:
         merge-multiple: true
 
     - name: Upload coverage to Codecov
-      uses: codecov/codecov-action@v4
+      uses: codecov/codecov-action@v5
       # uploading to codecov occasionally fails, so continue running the test
       # workflow regardless of the upload
       continue-on-error: true