diff --git a/.github/workflows/check-release.yml b/.github/workflows/check-release.yml
index 553a0ba..6581afc 100644
--- a/.github/workflows/check-release.yml
+++ b/.github/workflows/check-release.yml
@@ -9,11 +9,11 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: Checkout TokTok/ci-tools
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: TokTok/ci-tools
           path: ci-tools
diff --git a/.github/workflows/common-ci.yml b/.github/workflows/common-ci.yml
index 97ce7b1..760e282 100644
--- a/.github/workflows/common-ci.yml
+++ b/.github/workflows/common-ci.yml
@@ -4,7 +4,7 @@ jobs:
   buildifier:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           submodules: recursive
       - name: Install
diff --git a/.github/workflows/haskell-ci.yml b/.github/workflows/haskell-ci.yml
index c471818..2bbdf03 100644
--- a/.github/workflows/haskell-ci.yml
+++ b/.github/workflows/haskell-ci.yml
@@ -5,7 +5,7 @@ jobs:
     runs-on: ubuntu-latest
     container: toxchat/toktok-stack:haskell
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Run tests
         run: stack test
       - name: Build source package
diff --git a/.github/workflows/haskell-publish.yml b/.github/workflows/haskell-publish.yml
index 3453f4b..a23d57c 100644
--- a/.github/workflows/haskell-publish.yml
+++ b/.github/workflows/haskell-publish.yml
@@ -22,14 +22,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
       - name: Login to DockerHub
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       - name: Build and push
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           file: .github/docker/Dockerfile
           push: true
@@ -40,9 +40,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Checkout TokTok/ci-tools
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: TokTok/ci-tools
           path: ci-tools
@@ -53,7 +53,7 @@ jobs:
           cabal-version: ${{ inputs.cabal-version }}
 
       - name: Cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         env:
           ghc-version: ${{ inputs.ghc-version }}
           cache-name: cache-cabal