diff --git a/.github/actions/cache-nextjs/action.yml b/.github/actions/cache-nextjs/action.yml
index 6d3a2a3e8171..1612663b45fa 100644
--- a/.github/actions/cache-nextjs/action.yml
+++ b/.github/actions/cache-nextjs/action.yml
@@ -9,7 +9,7 @@ runs:
   using: 'composite'
   steps:
     - name: Cache .next/cache
-      uses: actions/cache@v4
+      uses: actions/cache@v6
       with:
         path: ${{ github.workspace }}/.next/cache
         # Packages and source files both invalidate the cache.
diff --git a/.github/actions/get-docs-early-access/action.yml b/.github/actions/get-docs-early-access/action.yml
index 671694fa9eb1..760f4e4a126d 100644
--- a/.github/actions/get-docs-early-access/action.yml
+++ b/.github/actions/get-docs-early-access/action.yml
@@ -19,7 +19,7 @@ runs:
       run: npm run what-docs-early-access-branch
 
     - name: Clone
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         repository: github/docs-early-access
         token: ${{ inputs.token }}
diff --git a/.github/actions/node-npm-setup/action.yml b/.github/actions/node-npm-setup/action.yml
index 372fc0132c03..2ce9ff6ebb68 100644
--- a/.github/actions/node-npm-setup/action.yml
+++ b/.github/actions/node-npm-setup/action.yml
@@ -6,7 +6,7 @@ runs:
   using: 'composite'
   steps:
     - name: Cache node_modules
-      uses: actions/cache@v4
+      uses: actions/cache@v6
       id: cache-node_modules
       env:
         # Cache restore failures are acceptable, so keep the segment timeout short.
@@ -18,7 +18,7 @@ runs:
 
     # The npm download cache only helps npm ci, so skip its 153 MB restore when node_modules hits.
     - name: Setup Node.js
-      uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+      uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version-file: 'package.json'
         package-manager-cache: false
diff --git a/.github/actions/slack-alert/action.yml b/.github/actions/slack-alert/action.yml
index 1940f4731bf9..64aa7438aadc 100644
--- a/.github/actions/slack-alert/action.yml
+++ b/.github/actions/slack-alert/action.yml
@@ -64,7 +64,7 @@ runs:
         } >> "$GITHUB_OUTPUT"
 
     - name: Send Slack notification if workflow fails
-      uses: slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+      uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
       with:
         method: chat.postMessage
         token: ${{ inputs.slack_token }}
diff --git a/.github/actions/warmup-remotejson-cache/action.yml b/.github/actions/warmup-remotejson-cache/action.yml
index 2d9220e09852..930640f055d5 100644
--- a/.github/actions/warmup-remotejson-cache/action.yml
+++ b/.github/actions/warmup-remotejson-cache/action.yml
@@ -12,7 +12,7 @@ runs:
   steps:
     # Restore a stable key, add to the cache, then save by SHA so the cache can grow without bound.
     - name: Cache .remotejson-cache (restore)
-      uses: actions/cache/restore@v4
+      uses: actions/cache/restore@v6
       with:
         path: .remotejson-cache
         key: remotejson-cache-
@@ -27,7 +27,7 @@ runs:
 
     - name: Cache .remotejson-cache (save)
       if: ${{ inputs.restore-only == '' }}
-      uses: actions/cache/save@v4
+      uses: actions/cache/save@v6
       with:
         path: .remotejson-cache
         key: remotejson-cache-${{ github.sha }}