diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 99999f3b..3663762a 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -21,7 +21,7 @@ jobs:
     outputs:
       docs: ${{ steps.filter.outputs.docs }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - uses: dorny/paths-filter@v2
         id: filter
@@ -34,7 +34,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 2 # partial depth for Turbo Repo
 
@@ -70,7 +70,7 @@ jobs:
 
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - uses: lsst-sqre/build-and-push-to-ghcr@v1
         id: build
@@ -86,7 +86,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Set up Python
         uses: actions/setup-python@v4
diff --git a/.github/workflows/codeql-analysis.yaml b/.github/workflows/codeql-analysis.yaml
index e62e1a35..2dc4b8c2 100644
--- a/.github/workflows/codeql-analysis.yaml
+++ b/.github/workflows/codeql-analysis.yaml
@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
diff --git a/.github/workflows/docker-release.yaml b/.github/workflows/docker-release.yaml
index 29b0289c..6db570bc 100644
--- a/.github/workflows/docker-release.yaml
+++ b/.github/workflows/docker-release.yaml
@@ -12,7 +12,7 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Setup Node.js
         uses: actions/setup-node@v3
@@ -25,17 +25,17 @@ jobs:
           echo "version=$(node -e "console.log(require('./apps/squareone/package.json').version);")" >> "$GITHUB_ENV"
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
       - name: Log in to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           context: '.'
           file: 'apps/squareone/Dockerfile'
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 0025b811..52ccef26 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - uses: pnpm/action-setup@v2
         with:
@@ -39,7 +39,7 @@ jobs:
       - name: Generate GitHub App Token
         # Associated app: https://github.com/organizations/lsst-sqre/settings/apps/squareone-ci
         id: generate_token
-        uses: tibdex/github-app-token@v1
+        uses: tibdex/github-app-token@v2
         with:
           app_id: ${{ secrets.SQUAREONE_CI_GH_APP_ID }}
           private_key: ${{ secrets.SQUAREONE_CI_GH_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/run-chromatic.yaml b/.github/workflows/run-chromatic.yaml
index d44f424b..8b7e9f12 100644
--- a/.github/workflows/run-chromatic.yaml
+++ b/.github/workflows/run-chromatic.yaml
@@ -20,7 +20,7 @@ jobs:
   chromatic:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0 # get full Git history
 
diff --git a/docs/packages/rubin-style-dictionary/installation.rst b/docs/packages/rubin-style-dictionary/installation.rst
index 8f4cad20..603b5dc5 100644
--- a/docs/packages/rubin-style-dictionary/installation.rst
+++ b/docs/packages/rubin-style-dictionary/installation.rst
@@ -69,7 +69,7 @@ In the specific case of a GitHub Actions workflow, you can use the built-in ``$G
       runs-on: ubuntu-latest
 
        steps:
-         - uses: actions/checkout@v3
+         - uses: actions/checkout@v4
 
          - name: Set up node
            uses: actions/setup-node@v3