diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index a84bcd17df..9e1a8b0fd2 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -21,7 +21,7 @@ jobs:
         go: ["1.22.1"]
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
       with:
         # For pull requests, build and test the PR head not a merge of the PR with the destination.
         ref: ${{ github.event.pull_request.head.sha || github.ref }}
@@ -41,7 +41,7 @@ jobs:
         go: ["1.21", "1.22"]
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
       with:
         # For pull requests, build and test the PR head not a merge of the PR with the destination.
         ref: ${{ github.event.pull_request.head.sha || github.ref }}
@@ -91,7 +91,7 @@ jobs:
       REDIS_HOST: localhost
       REDIS_PORT: 6379
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
       with:
         # For pull requests, build and test the PR head not a merge of the PR with the destination.
         ref: ${{ github.event.pull_request.head.sha || github.ref }}
diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index fe31e4671b..ff06336c62 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -15,13 +15,13 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # version v3.0.2
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # version v4.1.7
         with:
           fetch-depth: 0 # required for new-from-rev option in .golangci.yml
       - name: Setup GO
-        uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # version v3.3.0
+        uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # version v5.0.2
       - name: Run golangci-lint
-        uses: golangci/golangci-lint-action@537aa1903e5d359d0b27dbc19ddd22c5087f3fbc # version v3.2.0
+        uses: golangci/golangci-lint-action@a4f60bb28d35aeee14e6880718e0c85ff1882e64 # version v6.0.1
         with:
           version: v1.52.2 # this is the golangci-lint version
           args: --issues-exit-code=0 # exit without errors for now - won't fail the build
diff --git a/.github/workflows/horizon-release.yml b/.github/workflows/horizon-release.yml
index 3977ab85d3..89a46b6c53 100644
--- a/.github/workflows/horizon-release.yml
+++ b/.github/workflows/horizon-release.yml
@@ -18,7 +18,7 @@ jobs:
           # Negate the result so process exits with 1 if anything found
           ! egrep -irn -A 1 --include=*.go "Action.+needed.+in.+release:.+$VERSION" ./
 
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
       - uses: ./.github/actions/setup-go
         with:
@@ -31,7 +31,7 @@ jobs:
         run: go run ./support/scripts/build_release_artifacts/main.go
 
       - name: Upload binaries to release
-        uses: svenstaro/upload-release-action@483c1e56f95e88835747b1c7c60581215016cbf2
+        uses: svenstaro/upload-release-action@04733e069f2d7f7f0b4aebc4fbdbce8613b03ccd
         with:
           repo_token: ${{ secrets.GITHUB_TOKEN }}
           tag: ${{ github.ref_name }}
diff --git a/.github/workflows/horizon.yml b/.github/workflows/horizon.yml
index 117e11bb6f..efb5fab4e9 100644
--- a/.github/workflows/horizon.yml
+++ b/.github/workflows/horizon.yml
@@ -42,7 +42,7 @@ jobs:
       PGPASSWORD: postgres
       PGDATABASE: postgres
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           # For pull requests, build and test the PR head not a merge of the PR with the destination.
           ref: ${{ github.event.pull_request.head.sha || github.ref }}
@@ -103,7 +103,7 @@ jobs:
 
       - name: Restore Horizon binary and integration tests source hash to cache
         id: horizon_binary_tests_hash
-        uses: actions/cache/restore@v3
+        uses: actions/cache/restore@v4
         with:
           path: ./empty
           lookup-only: true
@@ -114,7 +114,7 @@ jobs:
 
       - name: Save Horizon binary and integration tests source hash to cache
         if: ${{ success() && steps.horizon_binary_tests_hash.outputs.cache-hit != 'true' }}
-        uses: actions/cache/save@v3
+        uses: actions/cache/save@v4
         with:
           path: ./empty
           key: ${{ env.COMBINED_SOURCE_HASH }}
@@ -126,7 +126,7 @@ jobs:
       STELLAR_CORE_VERSION: 21.0.0-1872.c6f474133.focal
       CAPTIVE_CORE_STORAGE_PATH: /tmp
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           # For pull requests, build and test the PR head not a merge of the PR with the destination.
           ref: ${{ github.event.pull_request.head.sha || github.ref }}
@@ -140,7 +140,7 @@ jobs:
       # Push image
       - if: github.ref == 'refs/heads/master'
         name: Login to DockerHub
-        uses: docker/login-action@bb984efc561711aaa26e433c32c3521176eae55b
+        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
diff --git a/.github/workflows/ledgerexporter-release.yml b/.github/workflows/ledgerexporter-release.yml
index 2e66847286..132c55f1f3 100644
--- a/.github/workflows/ledgerexporter-release.yml
+++ b/.github/workflows/ledgerexporter-release.yml
@@ -19,7 +19,7 @@ jobs:
       STELLAR_CORE_VERSION: 21.1.0-1921.b3aeb14cc.focal
       VERSION: ${GITHUB_REF_NAME#ledgerexporter-v} 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: github.sha
       - name: Pull Quickstart image
@@ -47,7 +47,7 @@ jobs:
 
       # Push images
       - name: Login to DockerHub
-        uses: docker/login-action@bb984efc561711aaa26e433c32c3521176eae55b
+        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
diff --git a/.github/workflows/ledgerexporter.yml b/.github/workflows/ledgerexporter.yml
index c80a367771..66cd003bf3 100644
--- a/.github/workflows/ledgerexporter.yml
+++ b/.github/workflows/ledgerexporter.yml
@@ -36,7 +36,7 @@ jobs:
         run: |
           docker pull "$LEDGEREXPORTER_INTEGRATION_TESTS_QUICKSTART_IMAGE"
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           # For pull requests, build and test the PR head not a merge of the PR with the destination.
           ref:  ${{ github.event.pull_request.head.sha || github.ref }}
diff --git a/.github/workflows/update-completed-sprint-on-issue-closed.yml b/.github/workflows/update-completed-sprint-on-issue-closed.yml
index 8ca1cf26e7..009de0dd3e 100644
--- a/.github/workflows/update-completed-sprint-on-issue-closed.yml
+++ b/.github/workflows/update-completed-sprint-on-issue-closed.yml
@@ -12,7 +12,7 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: tibdex/github-app-token@v1
+        uses: tibdex/github-app-token@v2
         with:
           app_id: ${{ secrets.GH_PROJECT_MANAGEMENT_APP_ID }}
           private_key: ${{ secrets.GH_PROJECT_MANAGEMENT_APP_PEM }}