diff --git a/.github/workflows/_container.yml b/.github/workflows/_container.yml
index dd22fdc..4e87e48 100644
--- a/.github/workflows/_container.yml
+++ b/.github/workflows/_container.yml
@@ -11,7 +11,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # Need this to get version number from last tag
           fetch-depth: 0
diff --git a/.github/workflows/_docs.yml b/.github/workflows/_docs.yml
index 1f5491b..7867651 100644
--- a/.github/workflows/_docs.yml
+++ b/.github/workflows/_docs.yml
@@ -12,7 +12,7 @@ jobs:
         run: sleep 60
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # Need this to get version number from last tag
           fetch-depth: 0
diff --git a/.github/workflows/_helm.yml b/.github/workflows/_helm.yml
index 6b53e9d..8d58ba0 100644
--- a/.github/workflows/_helm.yml
+++ b/.github/workflows/_helm.yml
@@ -12,12 +12,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
       - name: Install helm
-        uses: Azure/setup-helm@v3
+        uses: Azure/setup-helm@v4
         with:
           version: ${{ env.HELM_VERSION_TO_INSTALL }}
 
diff --git a/.github/workflows/_release.yml b/.github/workflows/_release.yml
index 3f949fc..dc336fe 100644
--- a/.github/workflows/_release.yml
+++ b/.github/workflows/_release.yml
@@ -7,7 +7,7 @@ jobs:
 
     steps:
       - name: Download artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           merge-multiple: true
 
@@ -23,7 +23,7 @@ jobs:
       - name: Create GitHub Release
         # We pin to the SHA, not the tag, for security reasons.
         # https://docs.github.com/en/actions/learn-github-actions/security-hardening-for-github-actions#using-third-party-actions
-        uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2
+        uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # v2.3.2
         with:
           prerelease: ${{ contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc') }}
           files: "*"
diff --git a/.github/workflows/_tox.yml b/.github/workflows/_tox.yml
index c0abaae..6a52777 100644
--- a/.github/workflows/_tox.yml
+++ b/.github/workflows/_tox.yml
@@ -12,7 +12,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Install python packages
         uses: ./.github/actions/install_requirements