diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1f01467..0847051 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -52,10 +52,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout caller repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Checkout platform repo (for composite actions)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: refokus-agency/platform
           ref: ${{ inputs.platform-ref }}
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 05a8ea1..1685236 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -54,10 +54,10 @@ jobs:
         shell: bash
 
       - name: Checkout caller repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Checkout platform repo (for composite actions)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: refokus-agency/platform
           ref: ${{ inputs.platform-ref }}
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index bf70fd8..b130f31 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -16,13 +16,13 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: googleapis/release-please-action@v4
+      - uses: googleapis/release-please-action@v5
         id: release
         with:
           config-file: release-please-config.json
           manifest-file: .release-please-manifest.json
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         if: ${{ steps.release.outputs.release_created }}
         with:
           fetch-depth: 0
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cebd4cc..fb91475 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -68,19 +68,19 @@ jobs:
       - name: Mint release token (GitHub App)
         id: app-token
         if: env.RELEASE_APP_ID != ''
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.RELEASE_APP_ID }}
           private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
 
       - name: Checkout caller repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           persist-credentials: false
 
       - name: Checkout platform repo (for composite actions)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: refokus-agency/platform
           ref: ${{ inputs.platform-ref }}
@@ -102,7 +102,7 @@ jobs:
           unsafe-install-scripts: ${{ inputs.unsafe-install-scripts }}
 
       - name: Semantic release
-        uses: cycjimmy/semantic-release-action@v4
+        uses: cycjimmy/semantic-release-action@v6
         with:
           ci: true
           semantic_version: ${{ inputs.semantic-release-version }}