diff --git a/.github/workflows/cargo_audit.yml b/.github/workflows/cargo_audit.yml
index ee322723..716ccbfe 100644
--- a/.github/workflows/cargo_audit.yml
+++ b/.github/workflows/cargo_audit.yml
@@ -8,10 +8,10 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository == 'google/OpenSK'
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: "true"
-      - uses: actions/setup-python@v1
+      - uses: actions/setup-python@v5
         with:
           python-version: "3.10"
       - name: Set up OpenSK
diff --git a/.github/workflows/cargo_bloat.yml b/.github/workflows/cargo_bloat.yml
index 44ea0c0d..b5894ca7 100644
--- a/.github/workflows/cargo_bloat.yml
+++ b/.github/workflows/cargo_bloat.yml
@@ -6,7 +6,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Setup
-      - uses: actions/setup-python@v1
+      - uses: actions/setup-python@v5
         with:
           python-version: "3.10"
       - uses: actions-rs/cargo@v1
@@ -15,7 +15,7 @@ jobs:
           args: cargo-bloat
 
       # First run: PR
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: true
       - name: Set up OpenSK
@@ -24,7 +24,7 @@ jobs:
         run: RUSTFLAGS="-C link-arg=-icf=all -C force-frame-pointers=no -C link-arg=-Tnrf52840_layout.ld" cargo bloat --release --target=thumbv7em-none-eabi --features=config_command,with_ctap1 --crates >> .github/workflows/bloat_output_new.txt
 
       # Second run: PR
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: true
           ref: ${{ github.base_ref }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a7df44fc..8336ebe7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,8 +23,8 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-python@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: "3.10"
       - run: ./setup.sh
diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml
index 4e20c470..91d9df1c 100644
--- a/.github/workflows/cifuzz.yml
+++ b/.github/workflows/cifuzz.yml
@@ -21,7 +21,7 @@ jobs:
         fuzz-seconds: 600
         dry-run: false
     - name: Upload Crash
-      uses: actions/upload-artifact@v1
+      uses: actions/upload-artifact@v4
       if: failure() && steps.build.outcome == 'success'
       with:
         name: artifacts
diff --git a/.github/workflows/coveralls.yml b/.github/workflows/coveralls.yml
index 6b1439ac..4ac59f30 100644
--- a/.github/workflows/coveralls.yml
+++ b/.github/workflows/coveralls.yml
@@ -13,12 +13,12 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: "true"
       - name: Install Rust toolchain
         run: rustup show
-      - uses: actions/setup-python@v1
+      - uses: actions/setup-python@v5
         with:
           python-version: "3.10"
       - name: Set up OpenSK
diff --git a/.github/workflows/mdlint.yml b/.github/workflows/mdlint.yml
index 5ef4c238..8b3c1047 100644
--- a/.github/workflows/mdlint.yml
+++ b/.github/workflows/mdlint.yml
@@ -12,9 +12,9 @@ jobs:
   mdlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: markdownlint-cli
-        uses: nosborn/github-action-markdown-cli@v1.1.1
+        uses: nosborn/github-action-markdown-cli@v3
         with:
           files: '**/*.md'
           ignore_files: "third_party/*"
diff --git a/.github/workflows/reproducible.yml b/.github/workflows/reproducible.yml
index fbb4adc0..c68b84d7 100644
--- a/.github/workflows/reproducible.yml
+++ b/.github/workflows/reproducible.yml
@@ -13,12 +13,12 @@ jobs:
       fail-fast: false
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: "true"
       - name: Install Rust toolchain
         run: rustup show
-      - uses: actions/setup-python@v1
+      - uses: actions/setup-python@v5
         with:
           python-version: "3.10"
       - name: Set up OpenSK
@@ -30,7 +30,7 @@ jobs:
         run: ./maintainers/reproduce_hashes.sh
 
       - name: Upload reproduced binaries
-        uses: actions/upload-artifact@v1
+        uses: actions/upload-artifact@v4
         with:
           name: reproduced-${{ matrix.os }}
           path: reproducible/reproduced.tar
diff --git a/docs/install.md b/docs/install.md
index fad13696..5e8f781b 100644
--- a/docs/install.md
+++ b/docs/install.md
@@ -46,8 +46,8 @@ might work for you.
 ### Compiling the firmware
 
 If this is your first time installing OpenSK, please skip directly to
-[Initial setup](#Initial-setup). Else, see
-[Updating your setup](#Updating-your-setup) below.
+[Initial setup](#initial-setup). Else, see
+[Updating your setup](#updating-your-setup) below.
 
 #### Updating your setup
 
@@ -140,7 +140,7 @@ From here on, please follow the instructions for your hardware:
 ### Advanced installation
 
 We recommend that you flash your development board with JTAG and dongles with
-DFU, as described in the [board documentation](#Flashing-a-firmware) linked
+DFU, as described in the [board documentation](#flashing-a-firmware) linked
 above. However, we support other programmers:
 
 *   OpenOCD: `./deploy.py --board=nrf52840_dongle_opensk --opensk