diff --git a/.github/workflows/add-remove-labels.yml b/.github/workflows/add-remove-labels.yml
index 588bb55f6..2c07b5d63 100644
--- a/.github/workflows/add-remove-labels.yml
+++ b/.github/workflows/add-remove-labels.yml
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Install uv
         uses: astral-sh/setup-uv@v6
diff --git a/.github/workflows/add-welcome-comment-set-assignee.yml b/.github/workflows/add-welcome-comment-set-assignee.yml
index 1b7ece9ed..f33915f54 100644
--- a/.github/workflows/add-welcome-comment-set-assignee.yml
+++ b/.github/workflows/add-welcome-comment-set-assignee.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Install uv
         uses: astral-sh/setup-uv@v6
diff --git a/.github/workflows/build-push-container-on-merge.yml b/.github/workflows/build-push-container-on-merge.yml
index b996facb8..b69fc9baf 100644
--- a/.github/workflows/build-push-container-on-merge.yml
+++ b/.github/workflows/build-push-container-on-merge.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Set env TAG
         run: |
           if [ ${{ github.event.pull_request.base.ref }} == "main" ]; then
diff --git a/.github/workflows/cherry-pick-comment.yml b/.github/workflows/cherry-pick-comment.yml
index 85efc7fec..e29f2471d 100644
--- a/.github/workflows/cherry-pick-comment.yml
+++ b/.github/workflows/cherry-pick-comment.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout the latest code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           token: ${{ secrets.RHODS_CI_BOT_PAT }}
           fetch-depth: 0 # otherwise, you will fail to push refs to dest repo
diff --git a/.github/workflows/close-stale-issues.yml b/.github/workflows/close-stale-issues.yml
index 7032f293c..c7f966492 100644
--- a/.github/workflows/close-stale-issues.yml
+++ b/.github/workflows/close-stale-issues.yml
@@ -7,7 +7,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@v10
         with:
           stale-issue-message: 'This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days.'
           days-before-stale: 60
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index a987f8c65..80a9f23c2 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -9,5 +9,5 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/labeler@v5
+      - uses: actions/checkout@v5
+      - uses: actions/labeler@v6
diff --git a/.github/workflows/on-review-add-label.yml b/.github/workflows/on-review-add-label.yml
index 3b5bfd1d2..4c1f2ae31 100644
--- a/.github/workflows/on-review-add-label.yml
+++ b/.github/workflows/on-review-add-label.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 'Download artifact'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({
@@ -48,7 +48,7 @@ jobs:
       - name: 'Unzip artifact'
         run: unzip context.zip
       - name: 'Return Parsed JSON'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         id: return-parsed-json
         with:
           script: |
@@ -79,7 +79,7 @@ jobs:
           echo "REVIEW_COMMENT_BODY=${{ needs.download_context_artifact.outputs.review_comment_body }}"  >> "$GITHUB_ENV"
           echo "GITHUB_USER_LOGIN=${{ needs.download_context_artifact.outputs.user_login }}"  >> "$GITHUB_ENV"
           echo "ACTION=${{ needs.download_context_artifact.outputs.action }}"  >> "$GITHUB_ENV"
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Install uv
         uses: astral-sh/setup-uv@v6
diff --git a/.github/workflows/push-container-on-comment.yml b/.github/workflows/push-container-on-comment.yml
index efd93e9bd..032851e1f 100644
--- a/.github/workflows/push-container-on-comment.yml
+++ b/.github/workflows/push-container-on-comment.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout pull request
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: refs/pull/${{ github.event.issue.number }}/head
       - name: Install uv
diff --git a/.github/workflows/size-labeler.yml b/.github/workflows/size-labeler.yml
index ef518f709..38be39a3b 100644
--- a/.github/workflows/size-labeler.yml
+++ b/.github/workflows/size-labeler.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Install uv
         uses: astral-sh/setup-uv@v6
diff --git a/.github/workflows/tox-tests.yml b/.github/workflows/tox-tests.yml
index 8a0e32245..5374f4209 100644
--- a/.github/workflows/tox-tests.yml
+++ b/.github/workflows/tox-tests.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: Install uv
       uses: astral-sh/setup-uv@v6
diff --git a/.github/workflows/verify_build_container.yml b/.github/workflows/verify_build_container.yml
index 386031709..5df0bdcd3 100644
--- a/.github/workflows/verify_build_container.yml
+++ b/.github/workflows/verify_build_container.yml
@@ -10,7 +10,7 @@ jobs:
 
     steps:
       - name: Checkout Pull Request Branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}