diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index dca6574..7df9dd9 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -21,7 +21,7 @@ jobs:
       pull-requests: write   # comment the diff summary inline
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4
+      - uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v4
         with:
           fail-on-severity: high
           # See https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/using-the-dependency-review-action
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8dad6f0..5c873a1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -266,13 +266,13 @@ jobs:
       contents: read
     steps:
       - name: Checkout release repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: keiailab/postgres-operator
           ref: ${{ needs.preflight.outputs.tag }}
           path: source
       - name: Checkout community-operators fork
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: eightynine01/community-operators
           token: ${{ secrets.COMMUNITY_OPERATORS_PAT }}
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 83a5745..c18efe4 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -19,7 +19,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9
+      - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
         with:
           days-before-stale: 60
           days-before-close: 14