diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..a0a49d610
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+version: 2
+# Before applying suggested PRs, make sure that the new versions of any
+# updated actions are allowed in
+# https://github.com/organizations/geany/settings/actions
+# Versions are pinned and restricted for security reasons.
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 526bd3b20..887897a62 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -44,10 +44,10 @@ jobs:
 
     steps:
       - name: Checkout Geany-Plugins
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Checkout Geany
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: geany/geany
           path: ${{ env.GEANY_SOURCE_PATH }}
@@ -62,7 +62,7 @@ jobs:
         run: echo "timestamp=$(date +%Y-%m-%d-%H-%M)" >> $GITHUB_OUTPUT
 
       - name: Configure ccache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ${{ env.CCACHE_DIR }}
           key: ${{ runner.os }}-${{ github.job }}-ccache-${{ steps.ccache_cache_timestamp.outputs.timestamp }}
@@ -75,7 +75,7 @@ jobs:
 
       - name: Configure Geany Cache
         id: geany_cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ${{ env.GEANY_CACHE_PATH }}
           key: ${{ runner.os }}-${{ github.job }}-geany-cache-${{ steps.prepare_geany_cache_key.outputs.commit_hash }}
@@ -181,17 +181,17 @@ jobs:
 
     steps:
       - name: Checkout Geany-Plugins
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Checkout Geany
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: geany/geany
           path: ${{ env.GEANY_SOURCE_PATH }}
           token: ${{ github.token }}
 
       - name: Checkout Build Scripts
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: master
           repository: geany/infrastructure
@@ -218,7 +218,7 @@ jobs:
 
       - name: Configure Geany Cache
         id: geany_cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ${{ env.GEANY_CACHE_PATH }}
           key: ${{ runner.os }}-${{ github.job }}-geany-mingw64-cache-${{ steps.prepare_geany_cache_key.outputs.commit_hash }}
@@ -229,7 +229,7 @@ jobs:
             env | sort
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ${{ env.DOCKER_REGISTRY }}
           username: ${{ github.actor }}
@@ -272,7 +272,7 @@ jobs:
           bash start_build.sh --log-to-stdout --mingw64 --geany-plugins --geany-plugins-source "${{ github.workspace }}"
 
       - name: Archive Geany-Plugins Installer
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: geany-plugins-installer-ci-${{ env.SHORT_SHA }}-pr${{ env.GITHUB_PULL_REQUEST_OR_REF }}
           retention-days: 30