diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml
index 4439325c..f7ce7ad0 100644
--- a/.github/workflows/container.yml
+++ b/.github/workflows/container.yml
@@ -33,7 +33,7 @@ jobs:
         uses: actions/checkout@v7.0.1
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4.2.0
+        uses: docker/setup-buildx-action@v4.4.1
 
       - name: Build and smoke application image
         run: |
@@ -59,13 +59,13 @@ jobs:
         uses: actions/checkout@v7.0.1
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v4.2.0
+        uses: docker/setup-qemu-action@v4.4.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4.2.0
+        uses: docker/setup-buildx-action@v4.4.1
 
       - name: Log in to GitHub Container Registry
-        uses: docker/login-action@v4.4.0
+        uses: docker/login-action@v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -88,7 +88,7 @@ jobs:
         shell: bash
 
       - name: Build and publish image
-        uses: docker/build-push-action@v7.3.0
+        uses: docker/build-push-action@v7.4.0
         with:
           build-args: |
             IMAGE_CREATED=${{ steps.build.outputs.created }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8daa59f7..129c77e2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -225,7 +225,7 @@ jobs:
         shell: bash
 
       - name: Generate bundled wheel provenance attestation
-        uses: actions/attest@v4.2.0
+        uses: actions/attest@v4.2.2
         with:
           subject-path: dist-platform/*.whl
 
@@ -381,7 +381,7 @@ jobs:
         shell: bash
 
       - name: Generate release provenance attestation
-        uses: actions/attest@v4.2.0
+        uses: actions/attest@v4.2.2
         with:
           subject-path: dist/*
 
@@ -419,7 +419,7 @@ jobs:
           path: dist
 
       - name: Publish package distributions to TestPyPI
-        uses: pypa/gh-action-pypi-publish@v1.14.1
+        uses: pypa/gh-action-pypi-publish@v1.14.2
         with:
           repository-url: https://test.pypi.org/legacy/
           print-hash: true
@@ -634,7 +634,7 @@ jobs:
         shell: bash
 
       - name: Publish package distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@v1.14.1
+        uses: pypa/gh-action-pypi-publish@v1.14.2
         with:
           print-hash: true
 
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 44909ddb..4ffed5c7 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -86,12 +86,12 @@ jobs:
         uses: actions/checkout@v7.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.37.3
+        uses: github/codeql-action/init@v4.38.1
         with:
           languages: python
           build-mode: none
 
       - name: Analyze with CodeQL
-        uses: github/codeql-action/analyze@v4.37.3
+        uses: github/codeql-action/analyze@v4.38.1
         with:
           category: "/language:python"