diff --git a/.github/workflows/cve-check.yml b/.github/workflows/cve-check.yml
index bfc8d342..300a8692 100644
--- a/.github/workflows/cve-check.yml
+++ b/.github/workflows/cve-check.yml
@@ -144,7 +144,7 @@ jobs:
 
       - name: Upload CVE files
         if: failure()
-        uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
         with:
           name: cves
           path: cve_slack_payload_*.json
@@ -163,7 +163,7 @@ jobs:
         with:
           name: cves
       - name: Notify CVEs in Slack
-        uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0
+        uses: slackapi/slack-github-action@37ebaef184d7626c5f204ab8d3baff4262dd30f0 # v1.27.0
         env:
           SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
         with:
@@ -178,7 +178,7 @@ jobs:
     steps:
       - name: Notify no CVEs in Slack
         if: success()
-        uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0
+        uses: slackapi/slack-github-action@37ebaef184d7626c5f204ab8d3baff4262dd30f0 # v1.27.0
         env:
           SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
         with:
diff --git a/.github/workflows/java-ci.yml b/.github/workflows/java-ci.yml
index 012a4183..f6d17119 100644
--- a/.github/workflows/java-ci.yml
+++ b/.github/workflows/java-ci.yml
@@ -37,7 +37,7 @@ jobs:
           ./gradlew jibDockerBuild &&
           docker run --rm --entrypoint="echo" mongodb-operator:latest 'image is not distroless' && exit 1 || echo 'image is distroless'
 
-      - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+      - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
         if: always()
         with:
           name: java-ci-test-results
diff --git a/.github/workflows/publish-docs.yml b/.github/workflows/publish-docs.yml
index f61e571b..6d02e973 100644
--- a/.github/workflows/publish-docs.yml
+++ b/.github/workflows/publish-docs.yml
@@ -16,7 +16,7 @@ jobs:
       - run: >
           wget -q -O /usr/local/bin/plantuml https://github.com/mikaelhg/puni2/releases/download/1.2022.7/plantuml-1.2022.7-glibc-x86_64
           && chmod 755 /usr/local/bin/plantuml
-      - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f #v.5.1.1
+      - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 #v.5.2.0
         with:
           python-version: 3.12
       - run: pip install mkdocs-techdocs-core # Includes material theme
@@ -31,7 +31,7 @@ jobs:
         run: mkdocs build --config-file mkdocs.yml && ls -al
       - name: Archive test build
         if: github.event_name == 'pull_request'
-        uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
         with:
           name: site
           path: |