diff --git a/.github/workflows/close-stale-prs.yml b/.github/workflows/close-stale-prs.yml
index 2ac1cd25e..68fa579ad 100644
--- a/.github/workflows/close-stale-prs.yml
+++ b/.github/workflows/close-stale-prs.yml
@@ -16,7 +16,7 @@ jobs:
       pull-requests: write
 
     steps:
-    - uses: actions/stale@v5
+    - uses: actions/stale@v9
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
         stale-pr-message: 'This pull request has been automatically marked as stale because it has been inactive for 90 days. Remove stale label or comment or this PR will be closed in 7 days.'
diff --git a/.github/workflows/issues.yml b/.github/workflows/issues.yml
index fed222313..db0aa77b5 100644
--- a/.github/workflows/issues.yml
+++ b/.github/workflows/issues.yml
@@ -13,7 +13,7 @@ jobs:
     name: Sync issue to Azure DevOps
     runs-on: ubuntu-latest
     steps:
-      - uses: danhellem/github-actions-issue-to-work-item@v2.1
+      - uses: danhellem/github-actions-issue-to-work-item@v2.2
         env:
           ado_token: "${{ secrets.ADO_AOCTO_BOT_TOKEN }}"
           github_token: "${{ secrets.GH_RAD_CI_BOT_PAT }}"
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index c85a2b929..28e634b41 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -18,7 +18,7 @@ jobs:
   release-docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           token: ${{ secrets.GH_RAD_CI_BOT_PAT }}
           ref: edge
diff --git a/.github/workflows/spellcheck.yaml b/.github/workflows/spellcheck.yaml
index 0926f55b3..6b3820d12 100644
--- a/.github/workflows/spellcheck.yaml
+++ b/.github/workflows/spellcheck.yaml
@@ -24,9 +24,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout docs
-      uses: actions/checkout@master
+      uses: actions/checkout@v4
     - name: Spellcheck
-      uses: rojopolis/spellcheck-github-actions@0.27.0
+      uses: rojopolis/spellcheck-github-actions@0.36.0
       with:
         config_path: .github/config/.pyspelling.yml
     - name: Post GitHub workkflow output on failure
diff --git a/.github/workflows/upmerge.yaml b/.github/workflows/upmerge.yaml
index 04003bd40..64527b69e 100644
--- a/.github/workflows/upmerge.yaml
+++ b/.github/workflows/upmerge.yaml
@@ -7,7 +7,7 @@ jobs:
   upmerge:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           token: ${{ secrets.GH_RAD_CI_BOT_PAT }}
           ref: edge
diff --git a/.github/workflows/validate-bicep.yaml b/.github/workflows/validate-bicep.yaml
index d9e275314..5c5b503bc 100644
--- a/.github/workflows/validate-bicep.yaml
+++ b/.github/workflows/validate-bicep.yaml
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Check out repo
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
     - name: Parse release version and set environment variables
       run: python ./.github/scripts/get_docs_version.py
     - name: Download rad-bicep
diff --git a/.github/workflows/website.yaml b/.github/workflows/website.yaml
index befc329d2..dd31ec4bc 100644
--- a/.github/workflows/website.yaml
+++ b/.github/workflows/website.yaml
@@ -32,23 +32,23 @@ jobs:
       HUGO_ENV: production
     steps:
       - name: Checkout docs repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: true
       - name: Parse release version and set environment variables
         run: python ./.github/scripts/get_docs_version.py
       - name: Checkout radius repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: radius-project/radius
           ref: ${{ env.RELEASE_BRANCH }}
           path: ./radius
       - name: Setup Node
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v4
         with:
           node-version: '14'
       - name: Setup Hugo
-        uses: peaceiris/actions-hugo@v2.5.0
+        uses: peaceiris/actions-hugo@v2.6.0
         with:
           hugo-version: ${{ env.HUGO_VERSION }}
           extended: true
@@ -76,7 +76,7 @@ jobs:
           fi
           hugo ${STAGING_URL+-b "$STAGING_URL"}
       - name: Upload Hugo artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: hugo_build
           path: ./docs/public/
@@ -93,11 +93,11 @@ jobs:
       url: ${{ github.ref_name == 'edge' && 'https://edge.docs.radapp.io' || 'https://docs.radapp.io' }}
     steps:
       - name: Checkout docs repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: false
       - name: Download Hugo artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: hugo_build
           path: site/
@@ -108,7 +108,7 @@ jobs:
           tenant-id: ${{ secrets.AZURE_SP_TESTS_TENANTID }}
           subscription-id: ${{ vars.ENV_APPSERVICE_SUBSCRIPTIONID }}
       - name: Deploy to WebApp
-        uses: Azure/webapps-deploy@v2
+        uses: Azure/webapps-deploy@v3
         with:
           app-name: ${{ vars.ENV_APPSERVICE_NAME }}
           resource-group-name: ${{ vars.ENV_APPSERVICE_RESOURCEGROUP }}
@@ -125,7 +125,7 @@ jobs:
       url: ${{ github.event_name == 'pull_request' && '' || (github.ref_name == 'edge' && 'https://edge.docs.radapp.io' || 'https://docs.radapp.io') }}
     steps:
       - name: Download Hugo artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: hugo_build
           path: site/
@@ -172,11 +172,11 @@ jobs:
       ALGOLIA_INDEX_NAME: ${{ secrets.ENV_ALGOLIA_INDEXNAME }}
     steps:
       - name: Checkout docs repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           submodules: false
       - name: Download Hugo artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: hugo_build
           path: site/
diff --git a/docs/content/guides/deploy-apps/howto-deploy/howto-deploy-cicd/index.md b/docs/content/guides/deploy-apps/howto-deploy/howto-deploy-cicd/index.md
index 6d65551ec..a4f032565 100644
--- a/docs/content/guides/deploy-apps/howto-deploy/howto-deploy-cicd/index.md
+++ b/docs/content/guides/deploy-apps/howto-deploy/howto-deploy-cicd/index.md
@@ -47,7 +47,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Check out repo
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
     - name: Setup kubectl
       uses: azure/setup-kubectl@v1
 ```
@@ -65,7 +65,7 @@ Ensure the service principal created above has the proper RBAC assignment to dow
 
 ```yml
     - name: az Login
-      uses: azure/login@v1
+      uses: azure/login@v2
       with:
         creds: ${{ secrets.AZURE_CREDENTIALS }}
     - name: Configure kubectl context