diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml
index c31b54fe0..88a777329 100644
--- a/.github/workflows/build-docker.yml
+++ b/.github/workflows/build-docker.yml
@@ -92,7 +92,7 @@ jobs:
       # impossible to push to GHCR. See https://github.com/macbre/push-to-ghcr/issues/12
       - name: Lowercase image registry and owner
         id: image_registry_case
-        uses: ASzc/change-string-case-action@v6
+        uses: ASzc/change-string-case-action@v8
         with:
           string: ${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}
 
@@ -105,7 +105,7 @@ jobs:
       # Build and publish Docker container image
       - name: Get Docker metadata
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         env:
           DOCKER_METADATA_PR_HEAD_SHA: true
           IS_MAIN_BRANCH: ${{ github.ref == format('refs/heads/{0}', env.MAIN_BRANCH) }}
@@ -117,7 +117,7 @@ jobs:
           flavor: |
             suffix=${{ env.VARIANT_SUFFIX }}
           tags: |
-            type=match,pattern=${{ env.TAG_PREFIX }}(.*),group=1 # this implicitly updates latest
+            type=match,pattern=${{ env.TAG_PREFIX }}(.*),group=1
             type=raw,value=stable,enable=${{ env.IS_STABLE_BRANCH }},priority=702
             type=raw,value=beta,enable=${{ env.IS_BETA_BRANCH }},priority=701
             type=raw,value=alpha,enable=${{ env.IS_ALPHA_BRANCH }},priority=701
@@ -126,21 +126,21 @@ jobs:
             type=sha,priority=100
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to GitHub Container Registry
         if: env.PUSH_IMAGE == 'true'
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           pull: true
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index d5be198b9..d1ca5a645 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -83,7 +83,7 @@ jobs:
 
       - name: Set up Pages
         id: pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@v6
 
       - name: Upload artifact
         uses: actions/upload-pages-artifact@v4
@@ -92,4 +92,4 @@ jobs:
 
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5