diff --git a/.github/workflows/check-dist.yml b/.github/workflows/check-dist.yml
index 5bc83e8..004a166 100644
--- a/.github/workflows/check-dist.yml
+++ b/.github/workflows/check-dist.yml
@@ -18,9 +18,9 @@ jobs:
   check-dist:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.2
+      - uses: actions/checkout@v6.0.2
       - name: Set Node.js 22.x
-        uses: actions/setup-node@v4.3.0
+        uses: actions/setup-node@v6.2.0
         with:
           node-version: 22
           cache: npm
@@ -37,7 +37,7 @@ jobs:
           fi
         id: diff
       # If index.js was different than expected, upload the expected version as an artifact
-      - uses: actions/upload-artifact@v4.6.2
+      - uses: actions/upload-artifact@v6.0.0
         if: ${{ failure() && steps.diff.conclusion == 'failure' }}
         with:
           name: dist
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index db92cb0..6da64d2 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -34,10 +34,10 @@ jobs:
         # Learn more about CodeQL language support at https://git.io/codeql-language-support
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3.28.12
+        uses: github/codeql-action/init@v4.32.0
         with:
           languages: ${{ matrix.language }}
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
@@ -49,7 +49,7 @@ jobs:
         # Prefix the list here with "+" to use these queries and those in the config file.
         # queries: ./path/to/local/query, your-org/your-repo/queries@main
 
-        uses: github/codeql-action/autobuild@v3.28.12
+        uses: github/codeql-action/autobuild@v4.32.0
       #- run: |
       #   make bootstrap
       #   make release
@@ -60,4 +60,4 @@ jobs:
         # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
         #    and modify them (or add more) to build your code if your project
         #    uses a compiled language
-        uses: github/codeql-action/analyze@v3.28.12
+        uses: github/codeql-action/analyze@v4.32.0
diff --git a/.github/workflows/rebuild-push-dist.yml b/.github/workflows/rebuild-push-dist.yml
index 59b1936..092cc48 100644
--- a/.github/workflows/rebuild-push-dist.yml
+++ b/.github/workflows/rebuild-push-dist.yml
@@ -12,12 +12,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
         with:
           persist-credentials: false
           fetch-depth: 0
       - name: Set Node.js 16.x
-        uses: actions/setup-node@v4.3.0
+        uses: actions/setup-node@v6.2.0
         with:
           node-version: 16.x
           cache: npm
@@ -35,7 +35,7 @@ jobs:
           app_id: ${{ secrets.FMSC_BOT_GITHUB_APP_ID }}
           private_key: ${{ secrets.FMSC_BOT_GITHUB_APP_PRIVATE_KEY }}
       - name: Push changes
-        uses: ad-m/github-push-action@v0.8.0
+        uses: ad-m/github-push-action@v1
         if: steps.commit.outputs.diff
         with:
           github_token: ${{ steps.generate_token.outputs.token }}
diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index 02c08fe..ca909ad 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -9,7 +9,7 @@ jobs:
   update_release_draft:
     runs-on: ubuntu-20.04
     steps:
-      - uses: release-drafter/release-drafter@v6.1.0
+      - uses: release-drafter/release-drafter@v6.2.0
         with:
           config-name: release-drafter.yaml
           publish: startsWith(github.ref, "refs/tags")
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 68da5c0..dda3f03 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Git Checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Install Updatecli
         uses: ./
       - name: Get fslabscli version
diff --git a/.github/workflows/updatecli.yaml b/.github/workflows/updatecli.yaml
index 6537f84..5d1a3c6 100644
--- a/.github/workflows/updatecli.yaml
+++ b/.github/workflows/updatecli.yaml
@@ -17,7 +17,7 @@ jobs:
       contents: read
     steps:
       - name: 'Checkout'
-        uses: 'actions/checkout@v4.2.2'
+        uses: 'actions/checkout@v6.0.2'
       - name: 'Setup updatecli'
         uses: 'updatecli/updatecli-action@v2'
       - name: 'Run updatecli in dryrun'
@@ -25,7 +25,7 @@ jobs:
         env:
           GITHUB_ACTOR: ${{ github.actor }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/create-github-app-token@v1.11.7
+      - uses: actions/create-github-app-token@v2.2.1
         id: generate_token
         if: github.ref == 'refs/heads/v1'
         with: