diff --git a/.github/workflows/prod-docker.yml b/.github/workflows/prod-docker.yml
index 242436d1..764228bf 100644
--- a/.github/workflows/prod-docker.yml
+++ b/.github/workflows/prod-docker.yml
@@ -39,7 +39,7 @@ jobs:
           install: true
 
       - name: Cache Docker layers
-        uses: actions/cache@v2
+        uses: actions/cache@v4.0.2
         with:
           path: /tmp/.buildx-cache
           # Key is named differently to avoid collision
@@ -48,7 +48,7 @@ jobs:
             ${{ runner.os }}-${{ env.ENV }}-buildx
 
       - name: Log in to dockerhub
-        uses: docker/login-action@v1
+        uses: docker/login-action@v3.3.0
         with:
           username: ${{ secrets.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_PASS }}
@@ -65,7 +65,7 @@ jobs:
           github.event_name == 'push' ||
           startsWith(github.ref, 'refs/tags/v')
         id: meta
-        uses: docker/metadata-action@v3
+        uses: docker/metadata-action@v5.5.1
         with:
           images: aeternity/dex-ui
           tags: |
@@ -79,7 +79,7 @@ jobs:
         if: |
           github.event_name == 'push' ||
           startsWith(github.ref, 'refs/tags/v')
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v6.7.0
         with:
           context: .
           file: Dockerfile
@@ -101,7 +101,7 @@ jobs:
           rm -rf /tmp/.buildx-cache
           mv /tmp/.buildx-cache-new /tmp/.buildx-cache
 
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           repository: aeternity/gitops-apps-aelabs.git
           ref: prd
diff --git a/.github/workflows/staging-docker.yml b/.github/workflows/staging-docker.yml
index 40d8c5aa..afb18bb2 100644
--- a/.github/workflows/staging-docker.yml
+++ b/.github/workflows/staging-docker.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Web build docker
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4.1.7
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha }}
@@ -30,7 +30,7 @@ jobs:
           install: true
 
       - name: Cache Docker layers
-        uses: actions/cache@v2
+        uses: actions/cache@v4.0.2
         with:
           path: /tmp/.buildx-cache
           # Key is named differently to avoid collision
@@ -39,7 +39,7 @@ jobs:
             ${{ runner.os }}-${{ env.ENV }}-buildx
 
       - name: Log in to dockerhub
-        uses: docker/login-action@v1
+        uses: docker/login-action@v3.3.0
         with:
           username: ${{ secrets.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_PASS }}
@@ -47,7 +47,7 @@ jobs:
       - name: Extract metadata for docker
         if: github.event_name == 'pull_request' && github.event.action == 'opened' || github.event.action == 'synchronize'
         id: meta
-        uses: docker/metadata-action@v3
+        uses: docker/metadata-action@v5.5.1
         with:
           images: aeternity/dex-ui
           tags: |
@@ -64,7 +64,7 @@ jobs:
 
       - name: Build and push docker image
         if: github.event_name == 'pull_request' && github.event.action == 'opened' || github.event.action == 'synchronize'
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v6.7.0
         with:
           context: .
           file: Dockerfile
@@ -86,7 +86,7 @@ jobs:
           rm -rf /tmp/.buildx-cache
           mv /tmp/.buildx-cache-new /tmp/.buildx-cache
 
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4.1.7
         with:
           repository: aeternity/gitops-apps-aelabs
           token: ${{ secrets.BOT_GITHUB_TOKEN }}
@@ -126,7 +126,7 @@ jobs:
           app: ${{ env.APP }}
 
       - name: Print PR url
-        uses: unsplash/comment-on-pr@v1.3.0
+        uses: unsplash/comment-on-pr@v1.3.1
         if: github.event_name == 'pull_request' && github.event.action == 'opened'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}