diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 6da0c3d..f67c087 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -16,13 +16,13 @@ jobs:
         runs-on: ubuntu-latest
         timeout-minutes: 10
         steps:
-            - uses: actions/checkout@v4
-            - uses: actions/setup-node@v4
+            - uses: actions/checkout@v6
+            - uses: actions/setup-node@v6
               with:
                   node-version: 22.x
                   cache: "yarn"
             - name: Restore Yarn Cache
-              uses: actions/cache@v4
+              uses: actions/cache@v5
               with:
                   path: node_modules
                   key: yarn-modules-${{ runner.arch }}-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}-dev
diff --git a/.github/workflows/review.yml b/.github/workflows/review.yml
index a2c0af0..fd60c66 100644
--- a/.github/workflows/review.yml
+++ b/.github/workflows/review.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - name: Generate a token
         id: generate-token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.REQUIRED_REVIEWS_APP_ID }}
           private-key: ${{ secrets.REQUIRED_REVIEWS_APP_KEY }}
@@ -33,7 +33,7 @@ jobs:
             -f context='Required Reviews' \
             -f description='Dependabot PR auto-approved'
 
-      - uses: Automattic/action-required-review@v5.0.0
+      - uses: Automattic/action-required-review@v5.0.1
         if: github.event.pull_request.user.login != 'dependabot[bot]' || github.actor != 'dependabot[bot]'
         with:
           token: ${{ steps.generate-token.outputs.token }}