diff --git a/.github/workflows/api-client.yml b/.github/workflows/api-client.yml
index 401e4750..89ea57aa 100644
--- a/.github/workflows/api-client.yml
+++ b/.github/workflows/api-client.yml
@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/backend-sonarqube-analysis.yml b/.github/workflows/backend-sonarqube-analysis.yml
index f7b4fbbe..41c8ffee 100644
--- a/.github/workflows/backend-sonarqube-analysis.yml
+++ b/.github/workflows/backend-sonarqube-analysis.yml
@@ -25,7 +25,7 @@ jobs:
             label: "ZUGFeRD"
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Set up JDK 21
         uses: actions/setup-java@v5
         with:
@@ -40,7 +40,7 @@ jobs:
         run: mvn -B verify --file backend/${{ matrix.sonar.folder }}/pom.xml
 
       - name: Cache SonarQube packages
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.sonar/cache
           key: ${{ runner.os }}-sonar
diff --git a/.github/workflows/backend.yml b/.github/workflows/backend.yml
index 24bb3f4d..5b12ecea 100644
--- a/.github/workflows/backend.yml
+++ b/.github/workflows/backend.yml
@@ -34,7 +34,7 @@ jobs:
 
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Set up JDK 21
         uses: actions/setup-java@v5
         with:
@@ -82,7 +82,7 @@ jobs:
           tags: ${{ steps.meta.outputs.tags }} # tags from the docker/metadata-action
 
       - name: Trigger deploy workflow
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         # only trigger deployment on main
         if: ${{ github.ref == 'refs/heads/main' }}
         with:
diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index f7291e9f..fa8a951a 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 
diff --git a/.github/workflows/dependency-track-analysis.yml b/.github/workflows/dependency-track-analysis.yml
index 8dbf3324..c72c6dd1 100644
--- a/.github/workflows/dependency-track-analysis.yml
+++ b/.github/workflows/dependency-track-analysis.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       # Checkout the code
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Set up JDK 21
         uses: actions/setup-java@v5
         with:
@@ -41,7 +41,7 @@ jobs:
 
       # Upload the SBOM to Dependency-Track
       - name: Upload BOM to Dependency-Track
-        uses: DependencyTrack/gh-upload-sbom@v3.1.0
+        uses: DependencyTrack/gh-upload-sbom@v4.0.0
         with:
           apiKey: ${{ secrets.DEPENDENCYTRACK_APIKEY }}
           serverHostname: "dtrack.hopps.cloud"
diff --git a/.github/workflows/frontend-dependency-track.yaml b/.github/workflows/frontend-dependency-track.yaml
index 4658e87f..38fd118c 100644
--- a/.github/workflows/frontend-dependency-track.yaml
+++ b/.github/workflows/frontend-dependency-track.yaml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Node.js
         uses: actions/setup-node@v6
@@ -54,7 +54,7 @@ jobs:
 
       # Upload the SBOM to Dependency-Track
       - name: Upload BOM to Dependency-Track
-        uses: DependencyTrack/gh-upload-sbom@v3.1.0
+        uses: DependencyTrack/gh-upload-sbom@v4.0.0
         with:
           apiKey: ${{ secrets.DEPENDENCYTRACK_APIKEY }}
           serverHostname: "dtrack.hopps.cloud"
diff --git a/.github/workflows/frontend.yml b/.github/workflows/frontend.yml
index 6f8f3e7a..8739e08a 100644
--- a/.github/workflows/frontend.yml
+++ b/.github/workflows/frontend.yml
@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Node.js
         uses: actions/setup-node@v6
@@ -93,7 +93,7 @@ jobs:
           tags: ghcr.io/${{ github.repository }}/frontend:${{ env.VERSION }}
 
       - name: Trigger deploy workflow
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         # only trigger deployment on main
         if: ${{ github.ref == 'refs/heads/main' }}
         with:
diff --git a/.github/workflows/helm-release.yaml b/.github/workflows/helm-release.yaml
index ee90a7ce..a13fef83 100644
--- a/.github/workflows/helm-release.yaml
+++ b/.github/workflows/helm-release.yaml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/keycloak.yml b/.github/workflows/keycloak.yml
index 6d76d7ed..c7081283 100644
--- a/.github/workflows/keycloak.yml
+++ b/.github/workflows/keycloak.yml
@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
@@ -60,7 +60,7 @@ jobs:
           tags: ghcr.io/${{ github.repository }}/hopps-keycloak:${{ env.VERSION }}
 
       - name: Trigger deploy workflow
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         # only trigger deployment on main
         if: ${{ github.ref == 'refs/heads/main' }}
         with: