diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ba106d8..2642a12 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -125,7 +125,7 @@ jobs:
           tools: controller-gen kustomize
 
       - name: Setup Python
-        uses: actions/setup-python@v7.0.0
+        uses: actions/setup-python@v7.1.0
         with:
           python-version: "3.x"
 
@@ -167,7 +167,7 @@ jobs:
 
       - name: Upload feature coverage report
         if: always()
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: feature-coverage-report
           path: traceability/feature-coverage-report.md
@@ -217,7 +217,7 @@ jobs:
           cache-to: type=gha,mode=max
 
       - name: Upload operator image
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: kick-image
           path: ${{ runner.temp }}/kick-image.tar
@@ -276,7 +276,7 @@ jobs:
         run: make kind-create
 
       - name: Download operator image
-        uses: actions/download-artifact@v8.0.1
+        uses: actions/download-artifact@v8.0.2
         with:
           name: kick-image
           path: dist
@@ -297,7 +297,7 @@ jobs:
 
       - name: Upload scenario timings
         if: always()
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: e2e-timings-${{ matrix.suite }}
           path: ${{ env.E2E_REPORT_DIR }}
diff --git a/.github/workflows/docs-pages.yml b/.github/workflows/docs-pages.yml
index 926e16c..6437d9b 100644
--- a/.github/workflows/docs-pages.yml
+++ b/.github/workflows/docs-pages.yml
@@ -50,7 +50,7 @@ jobs:
       - name: Setup Hugo
         uses: peaceiris/actions-hugo@v3.2.1
         with:
-          hugo-version: 0.166.0
+          hugo-version: 0.168.0
           extended: true
 
       - name: Build docs site
@@ -89,7 +89,7 @@ jobs:
         if: github.event.action != 'closed'
         uses: peaceiris/actions-hugo@v3.2.1
         with:
-          hugo-version: 0.166.0
+          hugo-version: 0.168.0
           extended: true
 
       - name: Build preview site
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 517dbca..6d0a625 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,7 +30,7 @@ jobs:
       - uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
-      - uses: actions/setup-python@v7.0.0
+      - uses: actions/setup-python@v7.1.0
         with:
           python-version: "3.x"
       - run: python -m pip install -r tools/requirements.txt
@@ -72,7 +72,7 @@ jobs:
         uses: docker/setup-buildx-action@v4.4.1
 
       - name: Login to GHCR
-        uses: docker/login-action@v4.6.0
+        uses: docker/login-action@v4.7.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -109,7 +109,7 @@ jobs:
         with:
           ref: ${{ needs.plan.outputs.sha }}
 
-      - uses: actions/setup-python@v7.0.0
+      - uses: actions/setup-python@v7.1.0
         with:
           python-version: "3.x"
       - run: python -m pip install -r tools/requirements.txt
@@ -145,7 +145,7 @@ jobs:
         run: tar -czf "dist/kick-crds-${TAG}.tar.gz" config/crd/bases
 
       - name: Generate SBOM
-        uses: anchore/sbom-action@v0.24.2
+        uses: anchore/sbom-action@v0.24.3
         with:
           artifact-name: kick-sbom.spdx.json
           output-file: dist/kick-sbom.spdx.json
@@ -159,7 +159,7 @@ jobs:
           sha256sum -- *.tgz *.tar.gz *.json > checksums.txt
 
       - name: Upload release artifacts
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: release-artifacts
           path: dist/*
@@ -171,7 +171,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/download-artifact@v8.0.1
+      - uses: actions/download-artifact@v8.0.2
         with:
           name: release-artifacts
           path: dist