diff --git a/.github/workflows/bump-opbeans-ruby.yml b/.github/workflows/bump-opbeans-ruby.yml
index 13f0ce4..36d4f8f 100644
--- a/.github/workflows/bump-opbeans-ruby.yml
+++ b/.github/workflows/bump-opbeans-ruby.yml
@@ -16,7 +16,7 @@ jobs:
   bump:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: '2.7.3'
diff --git a/.github/workflows/create-tag.yml b/.github/workflows/create-tag.yml
index f483aca..365f955 100644
--- a/.github/workflows/create-tag.yml
+++ b/.github/workflows/create-tag.yml
@@ -17,7 +17,7 @@ jobs:
   tag:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0 # also fetch tags
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a61e24f..744bd11 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,7 @@ jobs:
       contents: read
       id-token: write
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
 
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v3
@@ -34,7 +34,7 @@ jobs:
 
     - name: Extract metadata (tags, labels)
       id: docker-meta
-      uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f  # v5.8.0
+      uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893  # v5.9.0
       with:
         images: ${{ env.DOCKER_IMAGE_NAME }}
         tags: |
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 9270b99..2d252d0 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
 
     - name: Run build
       run: make build
@@ -25,7 +25,7 @@ jobs:
 
     - name: Store test results
       if: success() || failure()
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v5
       with:
         name: test-results
         path: target/*.xml