diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3ec1538..de863d2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Install mise
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@82a612c5ab8bcda7cc5db6b7e81a8e7584c3dc6e # v5.2.3
 
       - name: Run shellcheck
         run: mise run lint
@@ -31,7 +31,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Install mise
-        uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+        uses: jdx/mise-action@82a612c5ab8bcda7cc5db6b7e81a8e7584c3dc6e # v5.2.3
 
       - name: Run tests
         run: mise run test
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 10f0b07..3cafdcc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,7 +8,7 @@ on:
 
 jobs:
   release:
-    uses: Staffbase/gha-workflows/.github/workflows/template_release_drafter.yml@6e6c062d84ba4422de03d07b019b75c345f3606e # v17.1.0
+    uses: Staffbase/gha-workflows/.github/workflows/template_release_drafter.yml@4480e618bd8586edff0e0feb7001cde314df5bd3 # v19.1.0
     secrets:
       client_id: ${{ vars.STAFFBASE_ACTIONS_CLIENT_ID }}
       private_key: ${{ secrets.STAFFBASE_ACTIONS_PRIVATE_KEY }}
diff --git a/action.yml b/action.yml
index 7dbc010..d04121a 100644
--- a/action.yml
+++ b/action.yml
@@ -243,7 +243,7 @@ runs:
 
     - name: Upload Digest
       if: inputs.multiarch-mode == 'build' && steps.docker_build.outputs.digest != ''
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: ${{ inputs.multiarch-artifact-name }}-${{ steps.build_config.outputs.arch }}
         path: ${{ inputs.multiarch-digests-path }}/*
@@ -252,7 +252,7 @@ runs:
 
     - name: Download Digests
       if: inputs.multiarch-mode == 'merge' && steps.preparation.outputs.build == 'true' && steps.preparation.outputs.push == 'true'
-      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
       with:
         path: ${{ inputs.multiarch-digests-path }}
         pattern: ${{ inputs.multiarch-artifact-name }}-*