diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index c787ff9969..8b25983a3d 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -314,7 +314,7 @@ jobs:
       - uses: actions/checkout@v4
       - name: lychee Link Checker
         id: lychee
-        uses: lycheeverse/lychee-action@v1
+        uses: lycheeverse/lychee-action@v2
         with:
           args: --verbose --accept=200,403,429  "**/*.html" "**/*.md" "**/*.txt" "**/*.json"
             --offline
diff --git a/.github/workflows/codecov-publish.yml b/.github/workflows/codecov-publish.yml
index 23c666b8ef..c826a755b1 100644
--- a/.github/workflows/codecov-publish.yml
+++ b/.github/workflows/codecov-publish.yml
@@ -43,7 +43,7 @@ jobs:
           run-id: ${{ github.event.workflow_run.id }}
 
       - name: Upload coverage report
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v5
         with:
           fail_ci_if_error: true
           files: /**/coverage-reports/**/*.*
diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index 248e8129d5..2aed8ee099 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -51,27 +51,27 @@ jobs:
         run: |
           ./deployment/cdk/opensearch-service-migration/buildDockerImages.sh -Dbuild.snapshot=false -Dbuild.version=0.${{ steps.get_data.outputs.version }}
       - name: Generate SBOM for migration_console
-        uses: anchore/sbom-action@v0.17.7
+        uses: anchore/sbom-action@v0.18.0
         with:
           image: migrations/migration_console:latest
           output-file: opensearch-migrations-console-sbom.spdx.json
       - name: Generate SBOM for traffic_replayer
-        uses: anchore/sbom-action@v0.17.7
+        uses: anchore/sbom-action@v0.18.0
         with:
           image: migrations/traffic_replayer:latest
           output-file: opensearch-migrations-traffic-replayer-sbom.spdx.json
       - name: Generate SBOM for capture_proxy
-        uses: anchore/sbom-action@v0.17.7
+        uses: anchore/sbom-action@v0.18.0
         with:
           image: migrations/capture_proxy:latest
           output-file: opensearch-migrations-traffic-capture-proxy-sbom.spdx.json
       - name: Generate SBOM for reindex_from_snapshot
-        uses: anchore/sbom-action@v0.17.7
+        uses: anchore/sbom-action@v0.18.0
         with:
           image: migrations/reindex_from_snapshot:latest
           output-file: opensearch-migrations-reindex-from-snapshot-sbom.spdx.json
       - name: Generate SBOM for artifacts
-        uses: anchore/sbom-action@v0.17.7
+        uses: anchore/sbom-action@v0.18.0
         with:
           file: artifacts.tar.gz
           output-file: artifacts-sbom.spdx.json
@@ -97,7 +97,7 @@ jobs:
           echo "::add-mask::$DOCKERHUB_PASSWORD"
           echo "dockerhub-password=$DOCKERHUB_PASSWORD" >> $GITHUB_OUTPUT
       - name: Login to DockerHub
-        uses: docker/login-action@v1
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.MIGRATIONS_DOCKER_USERNAME }}
           password: ${{ steps.retrieve-values.outputs.dockerhub-password }}
diff --git a/.github/workflows/sonar-qube.yml b/.github/workflows/sonar-qube.yml
index e5f23ada47..e2baf7e7a1 100644
--- a/.github/workflows/sonar-qube.yml
+++ b/.github/workflows/sonar-qube.yml
@@ -27,14 +27,14 @@ jobs:
           SONAR_ES_BOOTSTRAP_CHECKS_DISABLE: "true"
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: actions/setup-java@v4
       with:
         distribution: 'corretto'
         java-version: |
             17
     - name: Cache SonarQube Scanner
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         path: ~/.sonar/cache
         key: sonar-cache