diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
index 4043d14e..3fd0890c 100644
--- a/.github/workflows/e2e.yaml
+++ b/.github/workflows/e2e.yaml
@@ -36,10 +36,10 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-go-
       - name: Setup Kubernetes
-        uses: helm/kind-action@v1.9.0
+        uses: helm/kind-action@v1.10.0
         with:
           install_only: true
-      - uses: yokawasa/action-setup-kube-tools@v0.11.0
+      - uses: yokawasa/action-setup-kube-tools@v0.11.2
         with:
           kustomize: '5.0.1'
           tilt: '0.32.2'
@@ -48,7 +48,7 @@ jobs:
         run: make e2e-verbose
       - name: Notify on Failure
         id: slack-notification
-        uses: slackapi/slack-github-action@v1.25.0
+        uses: slackapi/slack-github-action@v2.0.0
         if: ${{ github.ref_name  == 'main' && github.event_name == 'schedule' && always() }}
         with:
           # Slack channel id, channel name, or user id to post message.
diff --git a/.github/workflows/mend_scan.yaml b/.github/workflows/mend_scan.yaml
index 4587be61..6056a72a 100644
--- a/.github/workflows/mend_scan.yaml
+++ b/.github/workflows/mend_scan.yaml
@@ -42,7 +42,7 @@ jobs:
         go-version-file: '${{ github.workspace }}/go.mod'
 
     - name: 'Setup jq'
-      uses: dcarbone/install-jq-action@v2.1.0
+      uses: dcarbone/install-jq-action@v3.0.1
       with:
         version: '1.7'
 
@@ -178,7 +178,7 @@ jobs:
         sha: ${{ github.event.pull_request.head.sha }}
     - name: Comment Mend Status on PR
       if: ${{ github.event_name != 'schedule' && steps.pr_exists.outputs.pr_found == 'true' }}
-      uses: thollander/actions-comment-pull-request@v2.5.0
+      uses: thollander/actions-comment-pull-request@v3.0.1
       with:
         message: |
           ## Mend Scan Summary: :${{ steps.report.outputs.status }}:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 2961d345..d9332cf6 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -97,11 +97,11 @@ jobs:
         mkdir -p output
         helm template ./deploy --namespace ocm-system --set "manager.image.tag=${{ env.RELEASE_VERSION }}" --include-crds > ./output/install.yaml
     - name: Setup Syft
-      uses: anchore/sbom-action/download-syft@7ccf588e3cf3cc2611714c2eeae48550fbc17552 # v0.15.11
+      uses: anchore/sbom-action/download-syft@fc46e51fd3cb168ffb36c6d1915723c47db58abb # v0.17.7
     - name: Setup Cosign
-      uses: sigstore/cosign-installer@v3.5.0
+      uses: sigstore/cosign-installer@v3.7.0
     - name: Run goreleaser
-      uses: goreleaser/goreleaser-action@v5
+      uses: goreleaser/goreleaser-action@v6
       with:
         distribution: goreleaser
         version: latest