diff --git a/.github/workflows/alpha-publish.yml b/.github/workflows/alpha-publish.yml
index b6df34208a..9d6db1420e 100644
--- a/.github/workflows/alpha-publish.yml
+++ b/.github/workflows/alpha-publish.yml
@@ -25,17 +25,17 @@ jobs:
             type=raw,value=alpha
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.11.1
+        uses: docker/setup-buildx-action@v3.12.0
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3.6.0
+        uses: docker/login-action@v3.7.0
         with:
           registry: ${{ secrets.DOCKER_REGISTRY_URL }}
           username: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
           password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
 
       - name: Build and push alpha image
-        uses: docker/build-push-action@v6.18.0
+        uses: docker/build-push-action@v6.19.2
         with:
           context: .
           platforms: linux/amd64 #,linux/arm64
diff --git a/.github/workflows/lintandformat.yml b/.github/workflows/lintandformat.yml
index 05e36a8c53..9255b03e07 100644
--- a/.github/workflows/lintandformat.yml
+++ b/.github/workflows/lintandformat.yml
@@ -23,7 +23,7 @@ jobs:
 
       - name: Cache uv folder
         id: cache-uv
-        uses: actions/cache@v4.3.0
+        uses: actions/cache@v5.0.3
         with:
           path: ~/.cache/uv
           key: ${{ runner.os }}-python-${{ steps.setup-python.outputs.python-version }}-uv-${{ hashFiles('requirements.txt', 'requirements-dev.txt') }}
@@ -36,7 +36,7 @@ jobs:
 
       - name: Cache .ruff_cache folder
         id: ruff_cache
-        uses: actions/cache@v4.3.0
+        uses: actions/cache@v5.0.3
         with:
           path: .ruff_cache
           key: ruff_cache-${{ github.head_ref }}
@@ -48,7 +48,7 @@ jobs:
 
       - name: Cache .mypy_cache folder
         id: mypy_cache
-        uses: actions/cache@v4.3.0
+        uses: actions/cache@v5.0.3
         with:
           path: .mypy_cache
           key: mypy_cache-${{ github.head_ref }}
diff --git a/.github/workflows/preprod-publish.yml b/.github/workflows/preprod-publish.yml
index 18dafffb0f..b32a2f9af2 100644
--- a/.github/workflows/preprod-publish.yml
+++ b/.github/workflows/preprod-publish.yml
@@ -51,17 +51,17 @@ jobs:
             preprod.pr=${{ github.event.inputs.pr }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.11.1
+        uses: docker/setup-buildx-action@v3.12.0
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3.6.0
+        uses: docker/login-action@v3.7.0
         with:
           registry: ${{ secrets.DOCKER_REGISTRY_URL }}
           username: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
           password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
 
       - name: Build and push preprod image
-        uses: docker/build-push-action@v6.18.0
+        uses: docker/build-push-action@v6.19.2
         with:
           context: .
           platforms: linux/amd64 #,linux/arm64
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index da9e0af953..d259d93319 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -25,17 +25,17 @@ jobs:
             type=raw,value=latest
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.11.1
+        uses: docker/setup-buildx-action@v3.12.0
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3.6.0
+        uses: docker/login-action@v3.7.0
         with:
           registry: ${{ secrets.DOCKER_REGISTRY_URL }}
           username: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
           password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
 
       - name: Build and push app
-        uses: docker/build-push-action@v6.18.0
+        uses: docker/build-push-action@v6.19.2
         with:
           context: .
           platforms: linux/amd64 #,linux/arm64
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index eb444b3d3b..7fccd929c0 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -64,7 +64,7 @@ jobs:
 
       - name: Cache uv folder
         id: cache-uv
-        uses: actions/cache@v4.3.0
+        uses: actions/cache@v5.0.3
         with:
           path: ~/.cache/uv
           key: ${{ runner.os }}-python-${{ steps.setup-python.outputs.python-version }}-uv-${{ hashFiles('requirements.txt', 'requirements-dev.txt') }}
@@ -77,7 +77,7 @@ jobs:
 
       - name: Cache .pytest_cache folder
         id: pytest_cache
-        uses: actions/cache@v4.3.0
+        uses: actions/cache@v5.0.3
         with:
           path: .pytest_cache
           key: pytest_cache-${{ github.head_ref }}
@@ -92,6 +92,6 @@ jobs:
         if: github.event_name == 'pull_request'
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@v5.5.1
+        uses: codecov/codecov-action@v5.5.2
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}