diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index 916819bbeac7..11a8b0a43dbc 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -55,7 +55,7 @@ jobs:
       - name: Base Setup
         uses: jupyterlab/maintainer-tools/.github/actions/base-setup@v1
 
-      - uses: iterative/setup-cml@v2
+      - uses: iterative/setup-cml@v3
 
       # First run the benchmark on the old reference
       - name: Checkout old reference
diff --git a/.github/workflows/license-header.yml b/.github/workflows/license-header.yml
index 84fb34ecd04d..b61ad55bc498 100644
--- a/.github/workflows/license-header.yml
+++ b/.github/workflows/license-header.yml
@@ -27,7 +27,7 @@ jobs:
 
       - name: Fix License Header
         # pin to include https://github.com/apache/skywalking-eyes/pull/168
-        uses: apache/skywalking-eyes/header@ed436a5593c63a25f394ea29da61b0ac3731a9fe
+        uses: apache/skywalking-eyes/header@3ea9df11bb3a5a85665377d1fd10c02edecf2c40
         with:
           mode: fix
 
diff --git a/.github/workflows/reject-staging-changes.yml b/.github/workflows/reject-staging-changes.yml
index bbff94ccc2d9..2a368708188c 100644
--- a/.github/workflows/reject-staging-changes.yml
+++ b/.github/workflows/reject-staging-changes.yml
@@ -16,7 +16,7 @@ jobs:
 
       - name: Get modified files in the staging directory
         id: modified-files-in-staging
-        uses: tj-actions/changed-files@v42.0.2
+        uses: tj-actions/changed-files@v44.5.2
         with:
           # only checks for modified files in this directory
           files: jupyterlab/staging