diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml
index 54d09fb3..71c17a35 100644
--- a/.github/workflows/contributors.yml
+++ b/.github/workflows/contributors.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 20d156d1..9644a6ff 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -28,7 +28,7 @@ jobs:
     steps:
       - name: Generate sandbox token
         id: app_token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.E2E_APP_ID }}
           private-key: ${{ secrets.E2E_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index a34219ed..5be709ff 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -14,10 +14,10 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: 20
           cache: npm
diff --git a/.github/workflows/release-warning.yml b/.github/workflows/release-warning.yml
index 89b4bed5..64ff62f6 100644
--- a/.github/workflows/release-warning.yml
+++ b/.github/workflows/release-warning.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Check for release label
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const labels = context.payload.pull_request.labels.map(l => l.name);
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1cc18880..6c2f06fa 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -91,7 +91,7 @@ jobs:
           git push origin $major --force
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v3
         with:
           tag_name: ${{ steps.next.outputs.next }}
           name: Release ${{ steps.next.outputs.next }}
diff --git a/.github/workflows/repoHygieneCheck.yml b/.github/workflows/repoHygieneCheck.yml
index 849fa9e3..20666949 100644
--- a/.github/workflows/repoHygieneCheck.yml
+++ b/.github/workflows/repoHygieneCheck.yml
@@ -15,7 +15,7 @@ jobs:
       contents: read
       pull-requests: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - id: check
         run: |
           # If manually triggered, always run
@@ -60,7 +60,7 @@ jobs:
     env:
       RAW_JSON: ${{ needs.resolve-repolinter-json.outputs.raw-json }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - run: echo $RAW_JSON > repolinter.json
       - uses: DSACMS/repolinter-action@main
         with:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index c871aa7c..381f66eb 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -12,10 +12,10 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: 20
           cache: 'npm'
diff --git a/.github/workflows/update-codejson.yml b/.github/workflows/update-codejson.yml
index 30be5507..55828306 100644
--- a/.github/workflows/update-codejson.yml
+++ b/.github/workflows/update-codejson.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/update-gov-dependencies.yml b/.github/workflows/update-gov-dependencies.yml
index a6426892..1e1b440e 100644
--- a/.github/workflows/update-gov-dependencies.yml
+++ b/.github/workflows/update-gov-dependencies.yml
@@ -17,10 +17,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: "20"
           cache: "npm"
@@ -32,7 +32,7 @@ jobs:
       # lets the run skip every repo that has not changed. The run id in the key
       # means each run saves a fresh copy for the next one.
       - name: Restore discovery cache
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: .gov-update-cache
           key: gov-update-cache-${{ github.run_id }}
@@ -66,7 +66,7 @@ jobs:
 
       - name: Create Pull Request
         if: steps.changes.outputs.changed == 'true'
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v8
         with:
           commit-message: "chore: update federal dependency list"
           title: "chore: update federal dependency list"