diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2a3f1b7..292041d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -8,7 +8,7 @@ jobs:
     name: Build
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Build
       run: make ci
     - name: Deploy
diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index df60f7d..1868e91 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -10,7 +10,7 @@ jobs:
     env:
       PULL_NUMBER: "${{ github.event.number }}"
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
       with:
         fetch-depth: 2
     - name: Build (head)
@@ -27,7 +27,7 @@ jobs:
         mv out upload/base
     - name: Checkout w3c/htmldiff-ui
       if: ${{ steps.build_base.outcome == 'success' }}
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         repository: w3c/htmldiff-ui
         ref: refs/heads/main
@@ -60,7 +60,7 @@ jobs:
         done
         echo -n "$PULL_NUMBER" >upload-compressed/.pull-number
     - name: Upload artifact
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         name: upload-compressed
         path: upload-compressed/
diff --git a/.github/workflows/upload-preview.yml b/.github/workflows/upload-preview.yml
index b39d2ee..b9dfdc8 100644
--- a/.github/workflows/upload-preview.yml
+++ b/.github/workflows/upload-preview.yml
@@ -15,16 +15,16 @@ jobs:
       pull-requests: 'write'
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
       with:
         fetch-depth: 2
     - name: Authenticate to Google Cloud
-      uses: google-github-actions/auth@v0
+      uses: google-github-actions/auth@v2
       with:
         workload_identity_provider: 'projects/28141583151/locations/global/workloadIdentityPools/github/providers/github-actions'
         service_account: 'github@spec-previews.iam.gserviceaccount.com'
     - name: Fetch artifact
-      uses: actions/github-script@v6
+      uses: actions/github-script@v7
       with:
         script: |
           const fs = require('fs');
@@ -71,7 +71,7 @@ jobs:
           content-encoding: br
           cache-control: no-transform, max-age=30
     - name: Post comment
-      uses: actions/github-script@v6
+      uses: actions/github-script@v7
       env:
         GCS_BASE: "spec-previews/${{ github.repository }}/pull/${{ env.PULL_NUMBER }}"
       with: