diff --git a/.github/workflows/dependabot-approve-and-automerge.yml b/.github/workflows/dependabot-approve-and-automerge.yml
index 8ad436085e9..6b7a493f6ec 100644
--- a/.github/workflows/dependabot-approve-and-automerge.yml
+++ b/.github/workflows/dependabot-approve-and-automerge.yml
@@ -12,7 +12,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v1.3.4
+        uses: dependabot/fetch-metadata@v2.1.0
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
       - name: Approve a PR
diff --git a/.github/workflows/dotnet-code-metrics.yml b/.github/workflows/dotnet-code-metrics.yml
index ff774575a1d..2340661da99 100644
--- a/.github/workflows/dotnet-code-metrics.yml
+++ b/.github/workflows/dotnet-code-metrics.yml
@@ -22,7 +22,7 @@ jobs:
         pull-requests: write
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
 
     - name: 'Print manual run reason'
       if: ${{ github.event_name == 'workflow_dispatch' }}
@@ -41,7 +41,7 @@ jobs:
         dir: ${{ './github-actions/DotNet.GitHubAction' }}
       
     - name: Create pull request
-      uses: peter-evans/create-pull-request@v3.4.1
+      uses: peter-evans/create-pull-request@v6.1.0
       if: ${{ steps.dotnet-code-metrics.outputs.updated-metrics }} == 'true'
       with:
         title: '${{ steps.dotnet-code-metrics.outputs.summary-title }}'
diff --git a/.github/workflows/markdownlint.yml b/.github/workflows/markdownlint.yml
index 9023df053b2..a4177a4bfa6 100644
--- a/.github/workflows/markdownlint.yml
+++ b/.github/workflows/markdownlint.yml
@@ -14,9 +14,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@a81bbbf8298c0fa03ea29cdc473d45769f953675 #@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #@v2
     - name: Use Node.js
-      uses: actions/setup-node@56899e050abffc08c2b3b61f3ec6a79a9dc3223d #@v1
+      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 #@v1
       with:
         node-version: 12.x
     - name: Run Markdownlint
diff --git a/.github/workflows/publish-mono-samples.yml b/.github/workflows/publish-mono-samples.yml
index 29462a2ff51..5e2d0119f5c 100644
--- a/.github/workflows/publish-mono-samples.yml
+++ b/.github/workflows/publish-mono-samples.yml
@@ -23,7 +23,7 @@ jobs:
   build-mono:
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@a81bbbf8298c0fa03ea29cdc473d45769f953675 #@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #@v2
     - name: Setup .NET SDK 6
       if: ${{ env.DOTNET_DO_INSTALL == 'true' }}
       run: |
diff --git a/.github/workflows/snippets5000.yml b/.github/workflows/snippets5000.yml
index 1760342e85e..b94b5d652df 100644
--- a/.github/workflows/snippets5000.yml
+++ b/.github/workflows/snippets5000.yml
@@ -32,7 +32,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
     # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-    - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 #@v3.1.0
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #@v2.7.0
 
     # Get the latest preview SDK (or sdk not installed by the runner)
     - name: Setup .NET SDK
@@ -62,7 +62,7 @@ jobs:
 
     # Update build output json file
     - name: Upload build results
-      uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce #@v3.1.2
+      uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 #@v4.3.3
       with:
         name: build
         path: ./output.json