diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 90359fd634..b45cf9d4a8 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -391,7 +391,7 @@ jobs:
         id: fetch_tag
         run: echo "tagVersion=$(git describe --tags $(git rev-list --tags --max-count=1))" >>$GITHUB_OUTPUT
       - name: Release
-        uses: softprops/action-gh-release@v2.2.0
+        uses: softprops/action-gh-release@v2.2.1
         with:
           generate_release_notes: true
           tag_name: ${{ steps.fetch_tag.outputs.tagVersion }}
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index bd0c8db26d..91bf993aff 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -49,7 +49,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: 'Upload artifact'
-        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # tag=v4.5.0
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # tag=v4.6.0
         with:
           name: SARIF file
           path: results.sarif
diff --git a/.github/workflows/test-containers.yaml b/.github/workflows/test-containers.yaml
index 53144127c3..e4bffe26c1 100644
--- a/.github/workflows/test-containers.yaml
+++ b/.github/workflows/test-containers.yaml
@@ -81,7 +81,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v41.0.7
+        uses: renovatebot/github-action@v41.0.8
         with:
           configurationFile: ./.github/renovate.json
           token: ${{ secrets.RENOVATE_GITHUB_TOKEN }}