diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index c4fb6ef..da4fe5a 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -16,7 +16,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: dependabot-metadata
-        uses: dependabot/fetch-metadata@v2.4.0
+        uses: dependabot/fetch-metadata@v2.5.0
         with:
           github-token: ${{ secrets.PUSH_TOKEN }}
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6e35081..2f00f62 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,7 +12,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
 
       - name: Semantic release
         id: semantic-release
diff --git a/action.yml b/action.yml
index ae04b1d..b0cfc6f 100644
--- a/action.yml
+++ b/action.yml
@@ -24,7 +24,7 @@ runs:
   steps:
     - name: Repo metadata
       id: repo
-      uses: actions/github-script@v7.0.1
+      uses: actions/github-script@v8.0.0
       with:
         script: |
           const repo = await github.rest.repos.get(context.repo)
@@ -38,13 +38,13 @@ runs:
 
     - name: Set up Docker Buildx
       id: buildx
-      uses: docker/setup-buildx-action@v3.11.1
+      uses: docker/setup-buildx-action@v3.12.0
       with:
         buildkitd-config-inline: ${{ inputs.buildkitd-config-inline }}
 
     - name: Build image
       id: docker-build
-      uses: docker/build-push-action@v6.18.0
+      uses: docker/build-push-action@v6.19.0
       with:
         builder: ${{ steps.buildx.outputs.name }}
         context: .