diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 072b83f..6e47a14 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,10 +16,10 @@ jobs:
 
     steps:
       -   name: "Checkout code"
-          uses: actions/checkout@v3
+          uses: actions/checkout@v6
 
       -   name: Lint Dockerfile
-          uses: hadolint/hadolint-action@v3.0.0
+          uses: hadolint/hadolint-action@v3.1.0
           with:
             dockerfile: "Dockerfile"
             format: "tty"
@@ -32,7 +32,7 @@ jobs:
       -   name: "Export image"
           run: mv dockercache amdcache
       -   name: 'Upload Artifact'
-          uses: actions/upload-artifact@v4
+          uses: actions/upload-artifact@v7
           with:
             name: amdcache
             path: amdcache
@@ -47,10 +47,10 @@ jobs:
 
     steps:
       -   name: "Checkout code"
-          uses: actions/checkout@v3
+          uses: actions/checkout@v6
 
       -   name: Lint Dockerfile
-          uses: hadolint/hadolint-action@v3.0.0
+          uses: hadolint/hadolint-action@v3.1.0
           with:
             dockerfile: "Dockerfile"
             format: "tty"
@@ -63,7 +63,7 @@ jobs:
       -   name: "Export image"
           run: mv dockercache armcache
       -   name: 'Upload Artifact'
-          uses: actions/upload-artifact@v4
+          uses: actions/upload-artifact@v7
           with:
             name: armcache
             path: armcache
@@ -82,16 +82,16 @@ jobs:
 
     steps:
       -   name: "Checkout code"
-          uses: actions/checkout@v3
+          uses: actions/checkout@v6
 
       -   name: Download amd64
-          uses: actions/download-artifact@v4
+          uses: actions/download-artifact@v7
           with:
             name: amdcache
             path: amdcache
 
       -   name: Download arm64
-          uses: actions/download-artifact@v4
+          uses: actions/download-artifact@v7
           with:
             name: armcache
             path: armcache
@@ -144,7 +144,7 @@ jobs:
 
       -   if: github.repository == 'Endava/docker-php' && startsWith(github.ref, 'refs/heads/release/')
           name: Upload Ubuntu Trivy scan results to GitHub Security tab
-          uses: github/codeql-action/upload-sarif@v2
+          uses: github/codeql-action/upload-sarif@v4
           with:
             sarif_file: 'trivy-results.sarif'
 
@@ -158,14 +158,14 @@ jobs:
             github-pat: ${{ secrets.PAT }}
       -   if: github.repository == 'Endava/docker-php' && startsWith(github.ref, 'refs/heads/release/')
           name: Login to DockerHub
-          uses: docker/login-action@v2
+          uses: docker/login-action@v4
           with:
             username: ${{ secrets.DOCKER_USERNAME }}
             password: ${{ secrets.DOCKER_PASSWORD }}
 
       -   if: github.repository == 'Endava/docker-php' && startsWith(github.ref, 'refs/heads/release/')
           name: Login to Quay.io
-          uses: docker/login-action@v2
+          uses: docker/login-action@v4
           with:
             registry: quay.io
             username: ${{ secrets.QUAY_USERNAME }}
@@ -173,7 +173,7 @@ jobs:
 
       -   if: github.repository == 'Endava/docker-php' && startsWith(github.ref, 'refs/heads/release/')
           name: Login to ghcr.io
-          uses: docker/login-action@v2
+          uses: docker/login-action@v4
           with:
             registry: ghcr.io
             username: ${{ github.actor }}
diff --git a/.github/workflows/release-notes.yml b/.github/workflows/release-notes.yml
index 5e60296..e57fda5 100644
--- a/.github/workflows/release-notes.yml
+++ b/.github/workflows/release-notes.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
       - name: Export UBUNTU_SUFFIX (if ubuntu is enabled)
         run: echo "UBUNTU_SUFFIX=`echo ${{ github.ref_name }} | grep 'ubuntu' > /dev/null && echo '-ubuntu' || echo ''`" >> $GITHUB_ENV
       - name: "Fetch all existing tags"
@@ -24,7 +24,7 @@ jobs:
       - name: Generate Changelog
         run: docker run --rm -v `pwd`/previous-php-i.txt:/usr/src/app/previous-php-i.txt -v `pwd`/generate-changelog.php:/usr/src/app/generate-changelog.php ghcr.io/endava/docker-php:${{ github.ref_name }} php /usr/src/app/generate-changelog.php ghcr.io/endava/docker-php:${{ github.ref_name }} > RELEASE_NOTES.txt
       - name: Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v3
         if: startsWith(github.ref, 'refs/tags/')
         with:
           body_path: RELEASE_NOTES.txt