diff --git a/.github/workflows/ci_helm_publish.yaml b/.github/workflows/ci_helm_publish.yaml
index de939410d..bab35359e 100644
--- a/.github/workflows/ci_helm_publish.yaml
+++ b/.github/workflows/ci_helm_publish.yaml
@@ -17,16 +17,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
       - name: Pull flux_river_configs
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
         with:
           repository: ssl-hep/flux_river_configs
           ref: main
           path: flux_river_configs
           token: ${{ secrets.API_TOKEN_GITHUB }}
       - name: Pull ssl-helm-charts
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
         with:
           repository: ssl-hep/ssl-helm-charts
           ref: gh-pages
@@ -107,7 +107,7 @@ jobs:
 
       - name: Create Release
         id: create_release
-        uses: softprops/action-gh-release@v3.0.1
+        uses: softprops/action-gh-release@v3.0.2
         with:
           tag_name: ${{ github.ref }}
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/ci_helm_tests.yaml b/.github/workflows/ci_helm_tests.yaml
index 5a8edaa04..abab2c4cb 100644
--- a/.github/workflows/ci_helm_tests.yaml
+++ b/.github/workflows/ci_helm_tests.yaml
@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
 
@@ -16,7 +16,7 @@ jobs:
         with:
           version: v3.9.2
 
-      - uses: actions/setup-python@v6.2.0
+      - uses: actions/setup-python@v7.0.0
         with:
           python-version: "3.10"
 
diff --git a/.github/workflows/ci_servicex.yaml b/.github/workflows/ci_servicex.yaml
index 523ef9ca4..de184edd0 100644
--- a/.github/workflows/ci_servicex.yaml
+++ b/.github/workflows/ci_servicex.yaml
@@ -17,7 +17,7 @@ jobs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
       - name: Checkout to repository
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
 
       - name: Read file contents
         working-directory: ./.github/workflows
@@ -39,10 +39,10 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout to repository
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
 
       - name: Set up Python versions
-        uses: actions/setup-python@v6.2.0
+        uses: actions/setup-python@v7.0.0
         with:
           python-version: |
             3.14
@@ -88,7 +88,7 @@ jobs:
       matrix:
         app: ${{fromJson(needs.build-matrix.outputs.matrix)}}
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
       - name: Extract tag name
         working-directory: ${{ matrix.app.dir_name }}
         shell: bash
@@ -104,17 +104,17 @@ jobs:
         run: |
           echo "${{ steps.extract_cache_name.outputs.cachetag }}"
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v4.1.0
+        uses: docker/setup-qemu-action@v4.2.0
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4.1.0
+        uses: docker/setup-buildx-action@v4.2.0
       - name: Login to Docker Hub
-        uses: docker/login-action@v4.2.0
+        uses: docker/login-action@v4.4.0
         if: ${{ github.secret_source == 'Actions' }}
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
       - name: Build and push
-        uses: docker/build-push-action@v7.2.0
+        uses: docker/build-push-action@v7.3.0
         if: ${{ github.secret_source == 'Actions' }}
         with:
           context: ${{ matrix.app.dir_name }}
@@ -125,7 +125,7 @@ jobs:
           file: ${{ matrix.app.dockerfile }}
           platforms: linux/amd64,linux/arm64
       - name: Build
-        uses: docker/build-push-action@v7.2.0
+        uses: docker/build-push-action@v7.3.0
         if: ${{ github.secret_source != 'Actions' }}
         with:
           context: ${{ matrix.app.dir_name }}