diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 85f330e8e..3bd796a45 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -37,7 +37,7 @@ jobs:
           cd ../../../../
           xcrun llvm-cov export -format="lcov" -instr-profile $pathCoverage Build/Build/Products/Debug/SwiftFormat.framework/SwiftFormat > info.lcov
       - name: Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v6
         with:
           # the token is optional for a public repo, but including it anyway
           token: a47579fa-9a2a-4c48-b557-aa725c6b5f92
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index fd12f8bd9..670c12804 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -21,23 +21,23 @@ jobs:
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           platforms: linux/amd64, linux/arm64
diff --git a/.github/workflows/label_fixed_issues.yml b/.github/workflows/label_fixed_issues.yml
index b1a377c5c..7870459ce 100644
--- a/.github/workflows/label_fixed_issues.yml
+++ b/.github/workflows/label_fixed_issues.yml
@@ -18,7 +18,7 @@ jobs:
     steps:
       - name: Extract issue numbers from PR
         id: extract_issues
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const prBody = context.payload.pull_request.body || '';
@@ -38,7 +38,7 @@ jobs:
             return issueNumbers;
 
       - name: Add label to issues
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const issueNumbers = ${{ steps.extract_issues.outputs.result }};
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 78391f775..0732935f0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -37,11 +37,11 @@ jobs:
       - name: Set Version Number
         run: echo "Using version number $GITHUB_REF_NAME" && sed -i "s/let swiftFormatVersion = \"[^\"]*\"/let swiftFormatVersion = \"$GITHUB_REF_NAME\"/" Sources/SwiftFormat.swift
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
       - name: Install cross-binutils for aarch64
         run: sudo apt-get update && sudo apt-get install -y binutils-aarch64-linux-gnu
       - name: Build and export binaries
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           platforms: linux/amd64,linux/arm64
diff --git a/.github/workflows/windows_release.yml b/.github/workflows/windows_release.yml
index bf45aa373..39b8e91a3 100644
--- a/.github/workflows/windows_release.yml
+++ b/.github/workflows/windows_release.yml
@@ -41,7 +41,7 @@ jobs:
           swift build -c release --triple ${{ matrix.target-triple }} -debug-info-format none -Xswiftc -static-stdlib `
             -Xswiftc -sdk -Xswiftc ${ExperimentalSDK}
 
-      - uses: microsoft/setup-msbuild@v2.0.0
+      - uses: microsoft/setup-msbuild@v3.0.0
 
       - shell: pwsh
         run: |