diff --git a/.github/workflows/changelog-check.yml b/.github/workflows/changelog-check.yml
index 72409c4e..e6122cd3 100644
--- a/.github/workflows/changelog-check.yml
+++ b/.github/workflows/changelog-check.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: "Check for changelog entry"
-        uses: brettcannon/check-for-changed-files@v1.2.0
+        uses: brettcannon/check-for-changed-files@v1.2.1
         with:
           file-pattern: |
             .changes/unreleased/*.yaml
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 80964659..76305e3e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
         registry-url: 'https://registry.npmjs.org'
 
     - name: Login to GitHub Container Registry
-      uses: docker/login-action@v3.1.0
+      uses: docker/login-action@v3.3.0
       with:
         registry: ghcr.io
         username: ${{ github.repository_owner }}
@@ -37,7 +37,7 @@ jobs:
         echo RELEASE_NOTES_PATH=.changes/$(go run main.go latest).md >> $GITHUB_ENV
 
     - name: Run GoReleaser
-      uses: goreleaser/goreleaser-action@v5.0.0
+      uses: goreleaser/goreleaser-action@v6.0.0
       with:
         version: latest
         args: --clean --release-notes=${{ env.RELEASE_NOTES_PATH }} --skip=validate --verbose
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 12139ef3..e0040689 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -36,7 +36,7 @@ jobs:
       uses: actions/checkout@v4
 
     - name: golangci-lint
-      uses: golangci/golangci-lint-action@v4
+      uses: golangci/golangci-lint-action@v6
       with:
         # Required: the version of golangci-lint is required and must be specified
         # without patch version: we always use the latest patch version.