diff --git a/.github/workflows/debian.yml b/.github/workflows/debian.yml
index 7386d86..2e17f53 100644
--- a/.github/workflows/debian.yml
+++ b/.github/workflows/debian.yml
@@ -38,9 +38,9 @@ jobs:
           - ghc: '9.10.1'
             ghc_minor: '9.10'
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: build + smoke test [${{ matrix.ghc }}]
-        uses: nick-invision/retry@v2
+        uses: nick-invision/retry@v3.0.0
         with:
           timeout_minutes: 8
           max_attempts: 3
@@ -48,7 +48,7 @@ jobs:
             docker build --pull \
               -t haskell:${{ matrix.ghc }}-${{ matrix.deb }} \
               ${{ matrix.ghc_minor }}/${{ matrix.deb }}
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           repository: docker-library/official-images
           path: official-images
@@ -82,9 +82,9 @@ jobs:
           - arch: aarch64
             docker_platform: arm64
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: docker build [ ${{ matrix.arch }} ${{ matrix.ghc }}]
-        uses: uraimo/run-on-arch-action@e9117b926d001f8683802c315b5a134f8c5da3d3
+        uses: uraimo/run-on-arch-action@v2.7.2
         with:
           arch: ${{ matrix.arch }}
           distro: ${{ matrix.deb }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 3b4e6ef..1b6b9a4 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -12,7 +12,7 @@ jobs:
   hadolint:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
     - uses: hadolint/hadolint-action@v1.6.0
       with:
         recursive: true