diff --git a/.github/workflows/alex.yml b/.github/workflows/alex.yml
index 130ddf8..ef8cf20 100644
--- a/.github/workflows/alex.yml
+++ b/.github/workflows/alex.yml
@@ -7,9 +7,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.6
       - name: Use Node.js
-        uses: actions/setup-node@v4.0.1
+        uses: actions/setup-node@v4.0.2
         with:
           node-version: 12.x
       - name: Comment on new PR
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index cb79dc5..0c87c9f 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -6,8 +6,8 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
-      - uses: actions/setup-node@v4.0.1
+      - uses: actions/checkout@v4.1.6
+      - uses: actions/setup-node@v4.0.2
         with:
           cache: yarn
 
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 56f2f9f..f3617f4 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -20,16 +20,16 @@ jobs:
 
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v4.1.1
+        uses: actions/checkout@v4.1.6
 
       - name: Log in to Docker Hub
-        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d
+        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_PASSWORD }}
 
       - name: Log in to the Container registry
-        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d
+        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -37,17 +37,17 @@ jobs:
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@9dc751fe249ad99385a2583ee0d084c400eee04e
+        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
         with:
           images: |
             ${{ secrets.DOCKERHUB_USERNAME }}/hullcss
             ghcr.io/${{ github.repository }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.0.0
+        uses: docker/setup-buildx-action@v3.3.0
 
       - name: Build and push Docker images
-        uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
+        uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25
         with:
           context: .
           push: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c062540..0f3f661 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,7 +9,7 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: google-github-actions/release-please-action@v4.0.2
+      - uses: google-github-actions/release-please-action@v4.1.1
         with:
           release-type: node
           package-name: release-please-action
diff --git a/.github/workflows/spell.yml b/.github/workflows/spell.yml
index 5c0c401..16a0574 100644
--- a/.github/workflows/spell.yml
+++ b/.github/workflows/spell.yml
@@ -7,5 +7,5 @@ jobs:
   spellcheck: # run the action
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
-      - uses: streetsidesoftware/cspell-action@v5.1.0
+      - uses: actions/checkout@v4.1.6
+      - uses: streetsidesoftware/cspell-action@v6.3.0
diff --git a/.github/workflows/yarn-upgrader.yml b/.github/workflows/yarn-upgrader.yml
index 1c49f00..6bde50b 100644
--- a/.github/workflows/yarn-upgrader.yml
+++ b/.github/workflows/yarn-upgrader.yml
@@ -16,9 +16,9 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.6
 
-      - uses: actions/setup-node@v4.0.1
+      - uses: actions/setup-node@v4.0.2
         with:
           node-version: 19.x
 
@@ -45,7 +45,7 @@ jobs:
 
       # Open a pull request if there are any changes
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v5.0.2
+        uses: peter-evans/create-pull-request@v6.0.5
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           branch: update/yarn-upgrade