diff --git a/.github/workflows/main-detect-changes.yaml b/.github/workflows/main-detect-changes.yaml
index fbb2550f7b2..f21608ab442 100644
--- a/.github/workflows/main-detect-changes.yaml
+++ b/.github/workflows/main-detect-changes.yaml
@@ -55,7 +55,7 @@ jobs:
 
       - name: Detect changed files
         id: changed-files
-        uses: tj-actions/changed-files@56284d80811fb5963a972b438f2870f175e5b7c8 # v40.2.3
+        uses: tj-actions/changed-files@ae82ed4ae04587b665efad2f206578aa6f0e8539 # v42.0.0
         with:
           files: ${{ inputs.files }}
           files_ignore: ${{ inputs.files-ignore }}
diff --git a/.github/workflows/main-integration-test-step.yaml b/.github/workflows/main-integration-test-step.yaml
index ad121380db5..cb3d193b5d8 100644
--- a/.github/workflows/main-integration-test-step.yaml
+++ b/.github/workflows/main-integration-test-step.yaml
@@ -88,7 +88,7 @@ jobs:
 
       - name: Download artifact(s)
         if: ${{ inputs.download-artifact-name || inputs.download-artifact-path }}
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3
+        uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4
         with:
           name: ${{ inputs.download-artifact-name }}
           path: ${{ inputs.download-artifact-path }}
@@ -107,7 +107,7 @@ jobs:
 
       - name: Upload artifact
         if: ${{ inputs.upload-artifact-name && inputs.upload-artifact-path }}
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
+        uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # v4
         with:
           retention-days: 3
           name: ${{ inputs.upload-artifact-name }}-${{ matrix.module }}
diff --git a/.github/workflows/main-node-step.yaml b/.github/workflows/main-node-step.yaml
index 41272e5ba49..e57f531f3b0 100644
--- a/.github/workflows/main-node-step.yaml
+++ b/.github/workflows/main-node-step.yaml
@@ -77,7 +77,7 @@ jobs:
 
       - name: Download artifact
         if: ${{ inputs.download-artifact-name || inputs.download-artifact-path }}
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3
+        uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4
         with:
           name: ${{ inputs.download-artifact-name }}
           path: ${{ inputs.download-artifact-path }}
@@ -96,7 +96,7 @@ jobs:
 
       - name: Upload artifact
         if: ${{ inputs.upload-artifact-name && inputs.upload-artifact-path }}
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
+        uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # v4
         with:
           retention-days: 3
           name: ${{ inputs.upload-artifact-name }}
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 9119ce97aa5..fa0467af6c7 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -240,7 +240,7 @@ jobs:
           install-command: npm ci
 
       - name: Download all artifacts
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3
+        uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4
 
       - name: Decompress all artifacts to current directory
         run: ls **/*.zip | xargs -n1 7z x -aoa
@@ -299,7 +299,7 @@ jobs:
           npm_token: ${{ secrets.NPM_TOKEN }}
 
       - name: Download compiled libs
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3
+        uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4
         with:
           name: compiled-libs
       - name: Decompress Libs
@@ -325,7 +325,7 @@ jobs:
         run: npm run version:print >> $GITHUB_STEP_SUMMARY
 
       - name: Upload changelog
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
+        uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # v4
         with:
           retention-days: 3
           name: changelog
@@ -376,7 +376,7 @@ jobs:
           install-command: make BOOTSTRAP_SCOPE=site install
 
       - name: Download compiled libs
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3
+        uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4
         with:
           name: 'compiled-libs'
 
@@ -386,7 +386,7 @@ jobs:
       # We generate an updated changelog only when there are artifacts to be published
       - name: Download changelog
         if: github.ref == 'refs/heads/main'
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3
+        uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4
         continue-on-error: true
         with:
           name: changelog