diff --git a/.github/workflows/create-tag.yml b/.github/workflows/create-tag.yml
index 0ac0b288..973ffb22 100644
--- a/.github/workflows/create-tag.yml
+++ b/.github/workflows/create-tag.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Get version number
         shell: bash
@@ -64,7 +64,7 @@ jobs:
 
       - name: Create tag
         if: env.CREATE_TAG == 'true' # run only in case CREATE_TAG is true
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             github.rest.git.createRef({
diff --git a/.github/workflows/releases-production.yml b/.github/workflows/releases-production.yml
index 4be6bc17..d64b2105 100644
--- a/.github/workflows/releases-production.yml
+++ b/.github/workflows/releases-production.yml
@@ -32,7 +32,7 @@ jobs:
       version: ${{ steps.get-version.outputs.version }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Get version number
         id: get-version
@@ -54,11 +54,11 @@ jobs:
     steps:
       # See https://docs.aws.amazon.com/lambda/latest/dg/python-package.html#python-package-create-dependencies
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: 'lambda-v${{ needs.get-esf-version.outputs.version }}'
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.12'
           cache: 'pip'          # caching pip dependencies
@@ -98,7 +98,7 @@ jobs:
       BUCKET_NAME: "elastic-serverless-forwarder"
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: 'lambda-v${{ needs.get-esf-version.outputs.version }}'
 
@@ -107,7 +107,7 @@ jobs:
           aws-account-id: "${{ env.AWS_ACCOUNT_ID }}"
           aws-region: "${{ env.AWS_REGION }}"
 
-      - uses: aws-actions/setup-sam@819220f63fb333a9a394dd0a5cab2d8303fd17e2 # v2
+      - uses: aws-actions/setup-sam@f664fad9e12492edfc187a31f575537dfbb0ff63 # v2
         with:
           use-installer: true
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/test-reporter.yml b/.github/workflows/test-reporter.yml
index e62386db..4d53eb25 100644
--- a/.github/workflows/test-reporter.yml
+++ b/.github/workflows/test-reporter.yml
@@ -30,7 +30,7 @@ jobs:
     if: ${{ github.event.workflow_run.event == 'pull_request' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           pattern: test-results*
           merge-multiple: true
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 20dfe5d7..8dc356f7 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -18,14 +18,14 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - run: make license
 
   lint:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - run: make docker-lint
 
   coverage:
@@ -34,9 +34,9 @@ jobs:
 
     steps:
 
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.12' # As defined in tests/scripts/docker/run_tests.sh
         cache: 'pip'           # caching pip dependencies
diff --git a/.github/workflows/version-update.yml b/.github/workflows/version-update.yml
index ad657eb5..ab69ddf9 100644
--- a/.github/workflows/version-update.yml
+++ b/.github/workflows/version-update.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Compare versions in share/version.py and CHANGELOG last entry
         shell: bash