diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 169e9b6a..6c2b52ae 100755
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -14,14 +14,14 @@ jobs:
       matrix:
         node: [20.x, 22.x, 23.x]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Use node@${{ matrix.node }}
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node }}
 
-      - uses: pnpm/action-setup@v2
+      - uses: pnpm/action-setup@v4
         with:
           version: 9
           run_install: false
@@ -32,7 +32,7 @@ jobs:
         run: |
           echo "store_path=$(pnpm store path --silent)" >> $GITHUB_OUTPUT
 
-      - uses: actions/cache@v3
+      - uses: actions/cache@v4
         with:
           path: ${{ steps.pnpm-cache.outputs.store_path }}
           key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 6de98591..defd6190 100755
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -10,21 +10,21 @@ jobs:
     name: 'push (amd64)'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Get commit sha
         id: sha
         run: |
           echo "short_sha=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
 
-      - uses: docker/setup-buildx-action@v2
-      - uses: docker/login-action@v2
+      - uses: docker/setup-buildx-action@v3
+      - uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: docker/build-push-action@v4
+      - uses: docker/build-push-action@v6
         with:
           push: true
           platforms: linux/amd64
@@ -34,25 +34,26 @@ jobs:
           tags: |
             ghcr.io/diced/zipline:v4-amd64
             ghcr.io/diced/zipline:v4-${{ steps.sha.outputs.short_sha }}-amd64
+
   push-arm64:
     name: 'push (arm64)'
     runs-on: self-hosted
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Get commit sha
         id: sha
         run: |
           echo "short_sha=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
 
-      - uses: docker/setup-buildx-action@v2
-      - uses: docker/login-action@v2
+      - uses: docker/setup-buildx-action@v3
+      - uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: docker/build-push-action@v4
+      - uses: docker/build-push-action@v6
         with:
           push: true
           platforms: linux/arm64
@@ -62,18 +63,19 @@ jobs:
           tags: |
             ghcr.io/diced/zipline:v4-arm64
             ghcr.io/diced/zipline:v4-${{ steps.sha.outputs.short_sha }}-arm64
+
   ammend-builds:
     runs-on: ubuntu-latest
     needs: [push-amd64, push-arm64]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Get commit sha
         id: sha
         run: |
           echo "short_sha=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
 
-      - uses: docker/setup-buildx-action@v2
-      - uses: docker/login-action@v2
+      - uses: docker/setup-buildx-action@v3
+      - uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}