diff --git a/.github/workflows/deploy-merged-pr.yml b/.github/workflows/deploy-merged-pr.yml
index 2efcc4e..8205dad 100644
--- a/.github/workflows/deploy-merged-pr.yml
+++ b/.github/workflows/deploy-merged-pr.yml
@@ -75,7 +75,7 @@ jobs:
       # OSS App
       - name: Generate GitHub App Token
         id: pr_app_token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ vars.WELLARCHITECTED_OSS_APP_ID }}
           private-key: ${{ secrets.WELLARCHITECTED_OSS_APP_PRIVATE_KEY }}
@@ -108,7 +108,7 @@ jobs:
       # OSS App
       - name: Generate GitHub App Token
         id: dispatch_app_token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ vars.WELLARCHITECTED_OSS_APP_ID }}
           private-key: ${{ secrets.WELLARCHITECTED_OSS_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/op-stale.yml b/.github/workflows/op-stale.yml
index a934c4d..ebfdbfa 100644
--- a/.github/workflows/op-stale.yml
+++ b/.github/workflows/op-stale.yml
@@ -10,7 +10,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/stale@997185467fa4f803885201cee163a9f38240193d # v10.1.1
+    - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
         stale-issue-message: 'Thanks for opening this issue! To keep the project healthy, we close inactive issues after some time. There has not been any activity in the last 28 days - if you are still working on this or feel it should remain open, just leave a quick comment in the next 7 days to let us know where things are at. We really appreciate your input!'
diff --git a/.github/workflows/pr-check.yml b/.github/workflows/pr-check.yml
index ac4593b..fe2089c 100644
--- a/.github/workflows/pr-check.yml
+++ b/.github/workflows/pr-check.yml
@@ -150,7 +150,7 @@ jobs:
         run: |
           npm run test:functional
 
-      - uses: actions/upload-artifact@v6
+      - uses: actions/upload-artifact@v7
         if: always()
         with:
           name: playwright-report