diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f1b2cc93a2..803f84ebae 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -100,7 +100,7 @@ jobs:
         shell: ${{ matrix.shell }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Install prerequisites (${{ matrix.target }} @ ${{ matrix.platform }})
         if : ${{ matrix.platform != 'x86_64-w64-mingw32' }}
@@ -160,20 +160,20 @@ jobs:
 
       - name: Save build/build.ninja for failed builds
         if: ${{ failure() }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: build-ninja-${{ matrix.target }}-${{ matrix.platform }}
           path: build/build.ninja
 
       - name: Dist filelist (dbg) (${{ matrix.target }} @ ${{ matrix.platform }})
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: dist-filelist-${{ matrix.target }}-${{ matrix.platform }}
           path: |
             dist/dist-filelist-*
 
       - name: Dist artifacts (${{ matrix.target }} @ ${{ matrix.platform }})
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: dist-qemu-${{ matrix.target }}-${{ matrix.platform }}
           path: |
@@ -183,6 +183,8 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')
     needs: [ Vars, Build ]
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps :
       - name: Create a source archive
         id: create-source
@@ -206,13 +208,13 @@ jobs:
           ls -l
 
       - name: Source filelist (dbg)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: src-filelist
           path: |
             src-filelist.txt
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           pattern: dist-qemu-*
           path: dist
@@ -243,7 +245,7 @@ jobs:
           rm -rf -- upload && mkdir -p upload && mv -v ${DIST_FILE_LIST} upload/
 
       - name: Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           draft: true
           files: upload/*
diff --git a/.github/workflows/issue_comment.yml b/.github/workflows/issue_comment.yml
index a339e2310b..8fb8a16813 100644
--- a/.github/workflows/issue_comment.yml
+++ b/.github/workflows/issue_comment.yml
@@ -8,7 +8,7 @@ jobs:
     name: Sync Issue Comments to Jira
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@master
+      - uses: actions/checkout@v6
       - name: Sync issue comments to JIRA
         uses: espressif/github-actions/sync_issues_to_jira@master
         env:
diff --git a/.github/workflows/new_issues.yml b/.github/workflows/new_issues.yml
index 002e8cb680..6cd9259957 100644
--- a/.github/workflows/new_issues.yml
+++ b/.github/workflows/new_issues.yml
@@ -8,7 +8,7 @@ jobs:
     name: Sync issues to Jira
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@master
+      - uses: actions/checkout@v6
       - name: Sync GitHub issues to Jira project
         uses: espressif/github-actions/sync_issues_to_jira@master
         env:
diff --git a/.github/workflows/new_prs.yml b/.github/workflows/new_prs.yml
index 3dcfce840c..6534d3166f 100644
--- a/.github/workflows/new_prs.yml
+++ b/.github/workflows/new_prs.yml
@@ -11,7 +11,7 @@ jobs:
     name: Sync PRs to Jira
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@master
+      - uses: actions/checkout@v6
       - name: Sync PRs to Jira project
         uses: espressif/github-actions/sync_issues_to_jira@master
         with: