diff --git a/.github/workflows/drupal-module.yml b/.github/workflows/drupal-module.yml
index e3d5aa6..200b96f 100644
--- a/.github/workflows/drupal-module.yml
+++ b/.github/workflows/drupal-module.yml
@@ -49,7 +49,7 @@ jobs:
       SIMPLETEST_DB: "sqlite://localhost/sites/default/files/db.sqlite"
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: shivammathur/setup-php@v2
         with:
@@ -104,7 +104,7 @@ jobs:
 
       - name: Upload coverage artifact
         if: ${{ matrix.coverage }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: coverage-jsonapi_frontend
           path: coverage.xml
@@ -113,7 +113,7 @@ jobs:
       - name: Upload coverage to Codecov
         if: ${{ matrix.coverage }}
         continue-on-error: true
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de
+        uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad
         with:
           use_oidc: true
           token: ${{ secrets.CODECOV_TOKEN }}
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 375e02b..0ca53e7 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -17,7 +17,7 @@ jobs:
       security-events: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Run Semgrep
         run: |