diff --git a/.github/workflows/combine_prs.yml b/.github/workflows/combine_prs.yml
index d6e494a5f..8f7de0d27 100644
--- a/.github/workflows/combine_prs.yml
+++ b/.github/workflows/combine_prs.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - name: combine-prs
         id: combine-prs
-        uses: github/combine-prs@v3.1.2
+        uses: github/combine-prs@v4.0.0
         with:
           branch_prefix: 'combine-prs'
           pr_title: 'chore: combine renovate[bot] PRs'
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 629f56526..c13cf2994 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -21,7 +21,7 @@ jobs:
     environment: Deploy
 
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Setup for Java build
         uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
diff --git a/.github/workflows/jreleaser.yml b/.github/workflows/jreleaser.yml
index df1f50154..bf7b4c993 100644
--- a/.github/workflows/jreleaser.yml
+++ b/.github/workflows/jreleaser.yml
@@ -21,7 +21,7 @@ jobs:
     steps:
       # Setups the environment
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 0
       - name: Set up JDK 11
diff --git a/.github/workflows/sorald_buildbreaker.yml b/.github/workflows/sorald_buildbreaker.yml
index f30b5419a..9004b8a07 100644
--- a/.github/workflows/sorald_buildbreaker.yml
+++ b/.github/workflows/sorald_buildbreaker.yml
@@ -11,7 +11,7 @@ jobs:
     name: Run Sorald Buildbreaker
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Run Sorald Buildbreaker
         uses: SpoonLabs/sorald-buildbreaker@45bafb6db29a466080328864cecf9b20d9ace3de
         with:
diff --git a/.github/workflows/support.yml b/.github/workflows/support.yml
index ba1d88725..5e493d899 100644
--- a/.github/workflows/support.yml
+++ b/.github/workflows/support.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           fetch-depth: 2
       - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 2862afcc9..8f006255e 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -28,7 +28,7 @@ jobs:
         if: ${{ matrix.os == 'windows-latest' }}
         run: git config --global core.autocrlf false
 
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           fetch-depth: 0  # SonarCloud prefers non-shallow clones
       - uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
@@ -76,7 +76,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
         with:
           python-version: '3.10.12'
@@ -112,7 +112,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
         with:
           java-version: 11