diff --git a/.github/workflows/backend-api-spec-update.yml b/.github/workflows/backend-api-spec-update.yml
index a80d763a1d..5204adcafe 100644
--- a/.github/workflows/backend-api-spec-update.yml
+++ b/.github/workflows/backend-api-spec-update.yml
@@ -10,19 +10,19 @@ jobs:
   update_backend_api_spec:
     runs-on: ubuntu-latest
     steps:
-      - uses: peterjgrainger/action-create-branch@v2.4.0
+      - uses: peterjgrainger/action-create-branch@v3.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           branch: 'infra/update-backend-api-spec'
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: 'infra/update-backend-api-spec'
           fetch-depth: 0 # we need a full history to make rebase with master
 
       - name: Set up Java
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           java-version: 17
           distribution: temurin
@@ -45,7 +45,7 @@ jobs:
           echo SAVE_CLI_GRADLE_OPTS=-PsaveCliPath=${{ github.workspace }}/save-cli >> $GITHUB_ENV
 
       - name: Generate open api doc
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@v3
         with:
           gradle-version: wrapper
           arguments: |
diff --git a/.github/workflows/build-base-images.yaml b/.github/workflows/build-base-images.yaml
index bbf8522bd4..05173c78e9 100644
--- a/.github/workflows/build-base-images.yaml
+++ b/.github/workflows/build-base-images.yaml
@@ -43,13 +43,13 @@ jobs:
           - base_image_name: ubuntu
             base_image_tag: '20.04'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - if: github.event_name == 'workflow_dispatch'
         name: Prepare to build from branch
         run: |
           git fetch
           git checkout origin/${{ inputs.branch }}
-      - uses: docker/login-action@v2
+      - uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: saveourtool
@@ -57,7 +57,7 @@ jobs:
       - name: Prepare formatted tags
         run: |
           echo FORMATTED_TAG=${{ matrix.base_image_tag }} | sed -e "s/-focal$//" | sed -e "s/20.04$/latest/" >> $GITHUB_ENV
-      - uses: docker/build-push-action@v4
+      - uses: docker/build-push-action@v5
         with:
           context: save-deploy/base-images
           push: true
@@ -72,18 +72,18 @@ jobs:
     name: Build custom Paketo builder for CPG-demo
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - if: github.event_name == 'workflow_dispatch'
         name: Prepare to build from branch
         run: |
           git fetch
           git checkout origin/${{ inputs.branch }}
-      - uses: docker/login-action@v2
+      - uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: saveourtool
           password: ${{ secrets.GITHUB_TOKEN }}
-      - uses: docker/build-push-action@v4
+      - uses: docker/build-push-action@v5
         with:
           context: save-demo-cpg/builder
           push: true
diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
index 381ac243cb..ddfd6db4e1 100644
--- a/.github/workflows/build_and_test.yml
+++ b/.github/workflows/build_and_test.yml
@@ -40,11 +40,11 @@ jobs:
     steps:
       - id: checkout
         if: ${{ github.event_name == 'push' }}
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 2
       - id: git-changed-files
-        uses: tj-actions/changed-files@v41
+        uses: tj-actions/changed-files@v42
         with:
           files_yaml: |
             root_gradle:
@@ -230,9 +230,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Download gradle reports
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
 
       - name: Code coverage report
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v4
         with:
           fail_ci_if_error: false
diff --git a/.github/workflows/build_and_test_reusable.yml b/.github/workflows/build_and_test_reusable.yml
index 367a94651c..0b06718a27 100644
--- a/.github/workflows/build_and_test_reusable.yml
+++ b/.github/workflows/build_and_test_reusable.yml
@@ -20,12 +20,12 @@ jobs:
     if: inputs.do-build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           # required for correct codecov upload
           fetch-depth: 0
       - name: Set up JDK 17
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           java-version: 17
           distribution: temurin
@@ -38,12 +38,12 @@ jobs:
           kv=$(cat gradle/libs.versions.toml | grep '^kotlin =' | awk -F'[=]' '{print $2}' | tr -d '" ')
           echo KOTLIN_VERSION=$kv >> $GITHUB_ENV
       - name: Cache konan
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.konan
           key: ${{ runner.os }}-gradle-konan-${{ env.KOTLIN_VERSION }}
       - name: Build ${{ inputs.module }}
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@v3
         with:
           gradle-version: wrapper
           gradle-home-cache-cleanup: true
@@ -60,14 +60,14 @@ jobs:
             --build-cache
       - name: Upload gradle reports ${{ inputs.module }}
         if: ${{ always() }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: gradle-reports-${{ inputs.module }}
           path: '${{ inputs.module }}/build/reports/'
           retention-days: 1
       - name: Upload frontend distribution
         if: inputs.module == 'save-frontend'
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: save-frontend
           path: 'save-frontend/build/libs/save-frontend-*-distribution.jar'
diff --git a/.github/workflows/build_save-agent_reusable.yml b/.github/workflows/build_save-agent_reusable.yml
index 6bf08e126b..8f31e984cf 100644
--- a/.github/workflows/build_save-agent_reusable.yml
+++ b/.github/workflows/build_save-agent_reusable.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout save-cloud
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           ref: ${{ inputs.branch }}
@@ -43,7 +43,7 @@ jobs:
           kv=$(cat gradle/libs.versions.toml | grep -m1 '^kotlin =' | awk -F'[=]' '{print $2}' | tr -d '" ')
           echo KOTLIN_VERSION=$kv >> $GITHUB_ENV
       - name: Cache konan
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.konan
           key: ${{ runner.os }}-gradle-konan-${{ env.KOTLIN_VERSION }}
@@ -57,7 +57,7 @@ jobs:
         run: sudo apt-get update && sudo apt-get install -y libcurl4-openssl-dev
 
       - name: Build save-agent and save-demo-agent
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@v3
         with:
           gradle-version: wrapper
           arguments: |
@@ -73,20 +73,20 @@ jobs:
 
       - name: Upload save-agent
         if: inputs.build-save-agent
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: save-agent
           path: 'save-agent/build/libs/save-agent-*-distribution.jar'
       - name: Upload save-demo-agent
         if: inputs.build-save-demo-agent
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: save-demo-agent
           path: 'save-demo-agent/build/libs/save-demo-agent-*-distribution.jar'
 
       - name: Upload gradle reports
         if: ${{ always() }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: gradle-reports
           path: '**/build/reports/'
diff --git a/.github/workflows/build_save-cli_reusable.yml b/.github/workflows/build_save-cli_reusable.yml
index 981d3440fa..56962136d7 100644
--- a/.github/workflows/build_save-cli_reusable.yml
+++ b/.github/workflows/build_save-cli_reusable.yml
@@ -15,7 +15,7 @@ jobs:
       version: ${{ steps.save-cli-version.outputs.version }}
     steps:
       - name: checkout save-cloud
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           sparse-checkout: |
             gradle/libs.versions.toml
@@ -34,12 +34,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout save-cli
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: saveourtool/save-cli
           fetch-depth: 0
       - name: Set up JDK 17
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           java-version: 17
           distribution: temurin
@@ -49,12 +49,12 @@ jobs:
           kv=$(cat gradle/libs.versions.toml | grep '^kotlin =' | awk -F'[=]' '{print $2}' | tr -d '" ')
           echo SAVE_CLI_KOTLIN_VERSION=$kv >> $GITHUB_ENV
       - name: Cache konan
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.konan
           key: ${{ runner.os }}-gradle-konan-${{ env.SAVE_CLI_KOTLIN_VERSION }}
       - name: Build save-cli
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@v3
         with:
           gradle-version: wrapper
           arguments: |
@@ -67,14 +67,14 @@ jobs:
         run: |
           find save-cli/build/bin/linuxX64/releaseExecutable -name "save-*.kexe" -exec sh -c 'printf "$1" | sed -r "s/.*save-(.*)-linuxX64.kexe/\1/" | echo "SAVE_CLI_VERSION=$(cat)" >> $GITHUB_ENV' _ {} \;
       - name: Upload save-cli
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: save-cli
           path: 'save-cli/build/bin/linuxX64/releaseExecutable/save-*.kexe'
           retention-days: 1
       - name: Upload gradle reports
         if: ${{ always() }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: gradle-reports
           path: '**/build/reports/'
diff --git a/.github/workflows/ct.yml b/.github/workflows/ct.yml
index ff99fbb0e3..b5ae99e5af 100644
--- a/.github/workflows/ct.yml
+++ b/.github/workflows/ct.yml
@@ -9,7 +9,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       # https://github.com/helm/chart-testing#local-repo
       - uses: pozetroninc/github-action-get-latest-release@master
         id: ct-version
diff --git a/.github/workflows/deploy_images_reusable.yml b/.github/workflows/deploy_images_reusable.yml
index db17a9defe..80d90d357e 100644
--- a/.github/workflows/deploy_images_reusable.yml
+++ b/.github/workflows/deploy_images_reusable.yml
@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: checkout save-cloud
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           ref: ${{ inputs.branch }}
@@ -53,19 +53,19 @@ jobs:
           kv=$(cat gradle/libs.versions.toml | grep -m1 '^kotlin =' | awk -F'[=]' '{print $2}' | tr -d '" ')
           echo KOTLIN_VERSION=$kv >> $GITHUB_ENV
       - name: Cache konan
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.konan
           key: ${{ runner.os }}-gradle-konan-${{ env.KOTLIN_VERSION }}
       - name: Set up JDK 17
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           java-version: 17
           distribution: temurin
 
       - name: Download save-cli
         if: ${{ endsWith(inputs.save-cli-version, '-SNAPSHOT') }}
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: save-cli
           path: ${{ github.workspace }}/save-cli
@@ -76,7 +76,7 @@ jobs:
 
       - name: Download save-agent
         if: inputs.module == 'save-backend'
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: save-agent
           path: ${{ github.workspace }}/save-agent
@@ -87,7 +87,7 @@ jobs:
 
       - name: Download save-demo-agent
         if: inputs.module == 'save-demo'
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: save-demo-agent
           path: ${{ github.workspace }}/save-demo-agent
@@ -97,7 +97,7 @@ jobs:
           echo SAVE_DEMO_AGENT_GRADLE_OPTS=-PsaveDemoAgentPath=${{ github.workspace }}/save-demo-agent >> $GITHUB_ENV
 
       - name: Build image for ${{ inputs.module }}
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@v3
         with:
           gradle-version: wrapper
           arguments: |
@@ -113,7 +113,7 @@ jobs:
             ${{ env.ADDITIONAL_GRADLE_OPTS }}
       - name: Upload gradle reports
         if: ${{ always() }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: gradle-reports
           path: '**/build/reports/'
diff --git a/.github/workflows/detekt.yml b/.github/workflows/detekt.yml
index 122def56a9..08622d4398 100644
--- a/.github/workflows/detekt.yml
+++ b/.github/workflows/detekt.yml
@@ -13,13 +13,13 @@ jobs:
       security-events: write
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Set up JDK 17
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           java-version: 17
           distribution: temurin
-      - uses: gradle/gradle-build-action@v2
+      - uses: gradle/gradle-build-action@v3
         with:
           gradle-version: wrapper
           arguments: |
@@ -29,12 +29,12 @@ jobs:
             -PgprUser=${{ github.actor }}
             -PgprKey=${{ secrets.GITHUB_TOKEN }}
       - name: Upload SARIF report to Github
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v3
         if: ${{ always() }}
         with:
           sarif_file: build/detekt-sarif-reports/detekt-merged.sarif
       - name: Upload SARIF artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         if: ${{ failure() }}
         with:
           name: sarif-reports
diff --git a/.github/workflows/diktat.yml b/.github/workflows/diktat.yml
index acd4c3bb3a..781a9420bc 100644
--- a/.github/workflows/diktat.yml
+++ b/.github/workflows/diktat.yml
@@ -13,13 +13,13 @@ jobs:
       security-events: write
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Set up JDK 17
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           java-version: 17
           distribution: temurin
-      - uses: gradle/gradle-build-action@v2
+      - uses: gradle/gradle-build-action@v3
         with:
           gradle-version: wrapper
           arguments: |
@@ -32,12 +32,12 @@ jobs:
             -PgprUser=${{ github.actor }}
             -PgprKey=${{ secrets.GITHUB_TOKEN }}
       - name: Upload SARIF report to Github
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v3
         if: ${{ always() }}
         with:
           sarif_file: build/reports/diktat/diktat-merged.sarif
       - name: Upload SARIF artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         if: ${{ failure() }}
         with:
           name: sarif-reports
diff --git a/.github/workflows/helm_push.yml b/.github/workflows/helm_push.yml
index 18a7537a05..878f8ab26e 100644
--- a/.github/workflows/helm_push.yml
+++ b/.github/workflows/helm_push.yml
@@ -19,21 +19,21 @@ on:
 jobs:
   deploy_chart:
     name: Package and push Helm chart
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     env:
       CHARTS_DIR: save-cloud-charts/save-cloud
 
     steps:
       - name: checkout save-cloud
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Install Helm
-        uses: azure/setup-helm@v3
+        uses: azure/setup-helm@v4
         with:
           version: latest
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/kjs-yarn-update.yml b/.github/workflows/kjs-yarn-update.yml
index 82f2dbeaef..49b83ffe89 100644
--- a/.github/workflows/kjs-yarn-update.yml
+++ b/.github/workflows/kjs-yarn-update.yml
@@ -14,18 +14,18 @@ jobs:
   update_kjs_yarn_lock:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         if: github.event_name == 'pull_request'
         with:
           # Checkout source branch directly, without merging base into it
           ref: ${{ github.event.pull_request.head.ref }}
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         if: github.event_name == 'push'
         with:
           # Checkout source branch directly, without merging base into it
           ref: ${{ github.event.push.ref }}
       - name: Generate yarn.lock
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@v3
         with:
           gradle-version: wrapper
           arguments: |
diff --git a/.github/workflows/save-api-build.yml b/.github/workflows/save-api-build.yml
index d554cc8715..ef3ee1d12c 100644
--- a/.github/workflows/save-api-build.yml
+++ b/.github/workflows/save-api-build.yml
@@ -9,12 +9,12 @@ on:
 jobs:
   build_and_test_with_code_coverage:
     name: Build, test and upload code coverage
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Set up JDK 17
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           java-version: 17
           distribution: temurin
@@ -22,12 +22,12 @@ jobs:
         # libcurl is needed for ktor-client-curl, libc-bin for orchestrator
         run: sudo apt-get update && sudo apt-get install -y libcurl4-openssl-dev libc-bin
       - name: Cache konan
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.konan
           key: ${{ runner.os }}-gradle-konan-1.7.0
 
-      - uses: gradle/gradle-build-action@v2
+      - uses: gradle/gradle-build-action@v3
         with:
           gradle-version: wrapper
           arguments: |
@@ -41,7 +41,7 @@ jobs:
 
       - name: Upload gradle reports
         if: ${{ always() }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: gradle-reports
           path: '**/build/reports/'
diff --git a/.github/workflows/save-api-release.yml b/.github/workflows/save-api-release.yml
index 877b1bd5ea..b0abf89db4 100644
--- a/.github/workflows/save-api-release.yml
+++ b/.github/workflows/save-api-release.yml
@@ -14,23 +14,23 @@ env:
 jobs:
   release:
     name: Build release
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           # release workflow should have access to all tags
           fetch-depth: 0
       - name: Set up JDK 17
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           java-version: 17
           distribution: temurin
       - name: Status git before
         run: git status
       - name: gradle release
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@v3
         with:
           gradle-version: wrapper
           arguments: |
@@ -46,7 +46,7 @@ jobs:
         run: git status
       - name: Upload artifact
         id: upload_artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: save-api-${{ runner.os }}
           path: save-api/build/*