diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 54e0557..339315f 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -7,13 +7,13 @@ on:
 jobs:
   build:
     name: Trivy vulnerability scanner
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/trivy-action@0
         with:
           scan-type: 'fs'
           ignore-unfixed: true
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index 274aa6b..d938fc3 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -21,18 +21,18 @@ jobs:
       cancel-in-progress: true
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         #needed for gitflow-incremental-builder
         with:
           fetch-depth: 0
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
           restore-keys: ${{ runner.os }}-m2
       - name: Set up JDK
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: 'zulu'
           java-version: '17'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6d6080a..c42bdb5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,11 +12,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           token: ${{ secrets.RELEASE_PERSONAL_ACCESS_TOKEN }}
       - name: Validate ${{ github.event.inputs.version }} release exists
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
           script: |
@@ -35,7 +35,7 @@ jobs:
             throw new Error(`Release ${{ github.event.inputs.version }} is not available`);
 
       - name: Set up JDK
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: 'zulu'
           java-version: '17'
diff --git a/.github/workflows/required-labels.yml b/.github/workflows/required-labels.yml
index ecfef86..089af34 100644
--- a/.github/workflows/required-labels.yml
+++ b/.github/workflows/required-labels.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Verify Pull Request has labels
     steps:
-      - uses: mheap/github-action-required-labels@v3
+      - uses: mheap/github-action-required-labels@v5
         with:
           mode: minimum
           count: 1
diff --git a/.github/workflows/validate_release_test.yml b/.github/workflows/validate_release_test.yml
index c89bf23..cda64d6 100644
--- a/.github/workflows/validate_release_test.yml
+++ b/.github/workflows/validate_release_test.yml
@@ -11,11 +11,9 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-
-      - uses: actions/checkout@v3
-
+      - uses: actions/checkout@v4
       - name: Validate ${{ github.event.inputs.version }} release exists
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
           script: |