diff --git a/.github/workflows/codecov.yaml b/.github/workflows/codecov.yaml
index bb9db91bd6..7120276aee 100644
--- a/.github/workflows/codecov.yaml
+++ b/.github/workflows/codecov.yaml
@@ -8,6 +8,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:    
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v4
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
\ No newline at end of file
diff --git a/.github/workflows/mend_scan.yaml b/.github/workflows/mend_scan.yaml
index 499c66cc83..ef990a9505 100644
--- a/.github/workflows/mend_scan.yaml
+++ b/.github/workflows/mend_scan.yaml
@@ -174,7 +174,7 @@ jobs:
         fi
         
     - name: Check if PR exists
-      uses: 8BitJonny/gh-get-current-pr@2.2.0
+      uses: 8BitJonny/gh-get-current-pr@3.0.0
       id: pr_exists
       with:
         filterOutClosed: true
diff --git a/.github/workflows/release-drafter.yaml b/.github/workflows/release-drafter.yaml
index 0f91170199..61b592d2d0 100644
--- a/.github/workflows/release-drafter.yaml
+++ b/.github/workflows/release-drafter.yaml
@@ -33,7 +33,7 @@ jobs:
           echo "RELEASE_VERSION=$RELEASE_VERSION" >> $GITHUB_ENV
 
       - name: Drafter
-        uses: release-drafter/release-drafter@v5
+        uses: release-drafter/release-drafter@v6
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 1e0b8be95e..e33ec08358 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -140,10 +140,10 @@ jobs:
         go-version-file: '${{ github.workspace }}/go.mod'
 
     - name: Setup Syft
-      uses: anchore/sbom-action/download-syft@41f7a6c033dbcdf78917f23b652c8b8146298c85 # v0.15.4
+      uses: anchore/sbom-action/download-syft@b6a39da80722a2cb0ef5d197531764a89b5d48c3 # v0.15.8
 
     - name: Setup Cosign
-      uses: sigstore/cosign-installer@v3.3.0
+      uses: sigstore/cosign-installer@v3.4.0
 
     - name: Setup git config
       run: |
@@ -262,7 +262,7 @@ jobs:
 
     - name: Publish Release Event
       if: inputs.release_candidate == false
-      uses: peter-evans/repository-dispatch@v2
+      uses: peter-evans/repository-dispatch@v3
       with:
         token: ${{ steps.generate_token.outputs.token }}
         repository: open-component-model/ocm-website