diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b9cbb551..9c2af706 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,8 +14,8 @@ jobs:
   go-fmt-and-vet:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
-      - uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
         with:
           go-version: 'stable'
           cache: true
@@ -32,7 +32,7 @@ jobs:
           PACKAGE_NAMES=$(go list ./... | grep -v github.com/hashicorp/raft/fuzzy)
           go vet $PACKAGE_NAMES
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8.0.0
+        uses: golangci/golangci-lint-action@e7fa5ac41e1cf5b7d48e45e42232ce7ada589601 # v9.1.0
 
   go-test:
     needs: go-fmt-and-vet
@@ -44,8 +44,8 @@ jobs:
     env:
       INTEG_TESTS: yes
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
-      - uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
         with:
           go-version: ${{ matrix.go }}
           architecture: ${{ matrix.arch }}
@@ -67,8 +67,8 @@ jobs:
         arch: ['x32', 'x64']
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
-      - uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
         with:
           go-version: ${{ matrix.go }}
           architecture: ${{ matrix.arch }}
@@ -90,7 +90,7 @@ jobs:
           cd raft-compat
           go mod tidy
           go test -race -v -coverpkg=./... ./... -coverprofile="${{ github.workspace }}/coverage.out"
-      - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+      - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           path: "${{ github.workspace }}/coverage.out"
           name: coverage-report-${{matrix.go}}-${{matrix.arch}}
diff --git a/.github/workflows/two-step-pr-approval.yml b/.github/workflows/two-step-pr-approval.yml
index 2cd86108..ccaa546a 100644
--- a/.github/workflows/two-step-pr-approval.yml
+++ b/.github/workflows/two-step-pr-approval.yml
@@ -14,7 +14,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6.0.0
       
       - name: Two stage PR review
         uses: hashicorp/two-stage-pr-approval@v0.1.0