diff --git a/.github/workflows/_buildx.yml b/.github/workflows/_buildx.yml
index c58cb8859..bd5c12a66 100644
--- a/.github/workflows/_buildx.yml
+++ b/.github/workflows/_buildx.yml
@@ -11,7 +11,7 @@ jobs:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           fetch-depth: 0
-      - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # 3.0.2
+      - uses: actions/download-artifact@7a1cd3216ca9260cd8022db641d960b1db4d1be4 # 4.0.0
         with:
           name: dist
       - name: Prep binaries
diff --git a/.github/workflows/_gorelease.yml b/.github/workflows/_gorelease.yml
index 57c9fa0d2..d46b5cdc2 100644
--- a/.github/workflows/_gorelease.yml
+++ b/.github/workflows/_gorelease.yml
@@ -16,7 +16,7 @@ jobs:
       - if: ${{ !startsWith(github.ref, 'refs/tags/v') }}
         run: echo "flags=--snapshot" >> $GITHUB_ENV
       - name: Setup Go
-        uses:  actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+        uses:  actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
           go-version-file: 'go.mod'
       - name: Run GoReleaser
@@ -27,7 +27,7 @@ jobs:
           args: release --rm-dist ${{ env.flags }}
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # 3.1.3
+      - uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # 4.0.0
         with:
           name: dist
           path: ./dist/*
diff --git a/.github/workflows/_swagger-check.yml b/.github/workflows/_swagger-check.yml
index 17baa7fd6..4d39ba9b0 100644
--- a/.github/workflows/_swagger-check.yml
+++ b/.github/workflows/_swagger-check.yml
@@ -9,7 +9,7 @@ jobs:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Setup Go
-        uses:  actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+        uses:  actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
           go-version-file: 'go.mod'
 
diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml
index 958037955..a6fc3f474 100644
--- a/.github/workflows/_test.yml
+++ b/.github/workflows/_test.yml
@@ -32,7 +32,7 @@ jobs:
     - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
     - name: Setup go
-      uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+      uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
       with:
         go-version-file: ./go.mod