diff --git a/.github/actions/docker/action.yml b/.github/actions/docker/action.yml
index 62012ed..66bc9e0 100644
--- a/.github/actions/docker/action.yml
+++ b/.github/actions/docker/action.yml
@@ -8,9 +8,9 @@ runs:
   using: composite
   steps:
   - name: Set up QEMU
-    uses: docker/setup-qemu-action@v3
+    uses: docker/setup-qemu-action@v4
   - name: Set up Docker Buildx
-    uses: docker/setup-buildx-action@v3
+    uses: docker/setup-buildx-action@v4
   - name: "Put back the git branch into git (Earthly uses it for tagging)"
     shell: bash
     run: |
diff --git a/.github/actions/nix/action.yml b/.github/actions/nix/action.yml
index bb172c5..cff923c 100644
--- a/.github/actions/nix/action.yml
+++ b/.github/actions/nix/action.yml
@@ -10,14 +10,14 @@ runs:
   - name: Install Nix
     uses: cachix/install-nix-action@v31
   - name: Cache dependencies
-    uses: nix-community/cache-nix-action@v6
+    uses: nix-community/cache-nix-action@v7
     with:
       primary-key: nix-${{ runner.os }}-${{ hashFiles('**/flake.nix', '**/flake.lock') }}
       restore-prefixes-first-match: nix-${{ runner.os }}-
   - name: Load dependencies
     shell: bash
     run: nix develop --install
-  - uses: actions/cache@v4
+  - uses: actions/cache@v5
     with:
       path: |
         ~/.cache/go-build
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index b8b21bf..6ab4c21 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -20,14 +20,14 @@ jobs:
     permissions:
       statuses: write
     steps:
-      - uses: amannn/action-semantic-pull-request@v5
+      - uses: amannn/action-semantic-pull-request@v6
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   Dirty:
     runs-on: "shipfox-4vcpu-ubuntu-2404"
     steps:
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@v6'
         with:
           fetch-depth: 0
       - name: Setup Nix
@@ -52,7 +52,7 @@ jobs:
   Tests:
     runs-on: "shipfox-4vcpu-ubuntu-2404"
     steps:
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@v6'
         with:
           fetch-depth: 0
       - name: Setup Nix
@@ -68,7 +68,7 @@ jobs:
     runs-on: "shipfox-4vcpu-ubuntu-2404"
     if: contains(github.event.pull_request.labels.*.name, 'build-images') || github.ref == 'refs/heads/main' || github.event_name == 'merge_group'
     steps:
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@v6'
         with:
           fetch-depth: 0
       - name: Setup Nix
@@ -76,7 +76,7 @@ jobs:
         with:
           token: ${{ secrets.NUMARY_GITHUB_TOKEN }}
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: "NumaryBot"
@@ -102,11 +102,11 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           version: "latest"
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@v6'
         with:
           fetch-depth: 0
       - name: Tailscale
-        uses: tailscale/github-action@v3
+        uses: tailscale/github-action@v4
         with:
           oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
           oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
diff --git a/.github/workflows/releases.yml b/.github/workflows/releases.yml
index db3e24a..88fb560 100644
--- a/.github/workflows/releases.yml
+++ b/.github/workflows/releases.yml
@@ -10,7 +10,7 @@ jobs:
   GoReleaser:
     runs-on: "shipfox-4vcpu-ubuntu-2404"
     steps:
-      - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@v6'
         with:
           fetch-depth: 0
       - name: Setup Nix
@@ -18,7 +18,7 @@ jobs:
         with:
           token: ${{ secrets.NUMARY_GITHUB_TOKEN }}
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: "NumaryBot"