diff --git a/.github/workflows/_check-excluded-packages.yml b/.github/workflows/_check-excluded-packages.yml
index cde9fcb428..24e756d5a8 100644
--- a/.github/workflows/_check-excluded-packages.yml
+++ b/.github/workflows/_check-excluded-packages.yml
@@ -25,14 +25,14 @@ jobs:
       # aleph-client and all its dependees still require nightly Rust version
       - name: Read aleph-client toolchain
         id: aleph-client-toolchain-channel
-        uses: SebRollen/toml-action@v1.0.2
+        uses: SebRollen/toml-action@v1.2.0
         with:
           file: 'aleph-client/rust-toolchain.toml'
           field: 'toolchain.channel'
 
       - name: Read workspace excluded packages list
         id: workspace-excluded-packages
-        uses: SebRollen/toml-action@v1.0.2
+        uses: SebRollen/toml-action@v1.2.0
         with:
           file: 'Cargo.toml'
           field: 'workspace.exclude'
diff --git a/.github/workflows/_update-node-image-infra.yml b/.github/workflows/_update-node-image-infra.yml
index 522df13224..19fcac90b3 100644
--- a/.github/workflows/_update-node-image-infra.yml
+++ b/.github/workflows/_update-node-image-infra.yml
@@ -87,7 +87,7 @@ jobs:
           done
 
       - name: GIT | Commit changes to argocd apps repository.
-        uses: EndBug/add-and-commit@v9.1.3
+        uses: EndBug/add-and-commit@v9.1.4
         env:
           TAG: ${{ steps.get-ref-properties.outputs.tag }}
         with:
diff --git a/.github/workflows/deploy-to-devnet.yml b/.github/workflows/deploy-to-devnet.yml
index 90d40b75ba..7002089b85 100644
--- a/.github/workflows/deploy-to-devnet.yml
+++ b/.github/workflows/deploy-to-devnet.yml
@@ -134,7 +134,7 @@ jobs:
           sleep 300
 
       - name: GIT | Commit changes to argocd apps repository.
-        uses: EndBug/add-and-commit@v9.1.3
+        uses: EndBug/add-and-commit@v9.1.4
         with:
           author_name: ${{ secrets.AUTOCOMMIT_AUTHOR }}
           author_email: ${{ secrets.AUTOCOMMIT_EMAIL }}
diff --git a/.github/workflows/on-push-release-tag.yml b/.github/workflows/on-push-release-tag.yml
index 37608d49f0..f942945d58 100644
--- a/.github/workflows/on-push-release-tag.yml
+++ b/.github/workflows/on-push-release-tag.yml
@@ -25,7 +25,7 @@ jobs:
 
       - name: Read node version
         id: read-node-version
-        uses: SebRollen/toml-action@v1.0.2
+        uses: SebRollen/toml-action@v1.2.0
         with:
           file: 'bin/node/Cargo.toml'
           field: 'package.version'