diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a9778fbe8..f5d9ccb6b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -79,7 +79,7 @@ jobs:
           file: ${{ matrix.jdk }}/${{ matrix.schema.env }}-coverage.svg
           run_id: ${{ github.run_id }}
       - name: Publish Test Report
-        uses: mikepenz/action-junit-report@v6.4.1
+        uses: mikepenz/action-junit-report@v6.5.0
         if: always()
         with:
           annotate_only: true
@@ -104,7 +104,7 @@ jobs:
         id: thebuild
         run: ./gradlew clean :cwms-data-api:test --tests "cwms.cda.api.OpenApiDocTest" --info --init-script init.gradle
       - name: Publish Test Report
-        uses: mikepenz/action-junit-report@v6.4.1
+        uses: mikepenz/action-junit-report@v6.5.0
         if: always()
         with:
           annotate_only: true
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 991df0413..933fd796a 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -17,7 +17,7 @@ jobs:
         uses: actions/checkout@v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.36.0
+        uses: github/codeql-action/init@v4.38.0
         with:
           languages: 'java'
       - name: setup java
@@ -34,4 +34,4 @@ jobs:
         id: build
         run: ./gradlew build --info --init-script init.gradle
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4.36.0
\ No newline at end of file
+        uses: github/codeql-action/analyze@v4.38.0
\ No newline at end of file
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f16620ad7..782e6ade3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -106,10 +106,10 @@ jobs:
           prerelease: ${{steps.version.outputs.prerelease}}
           token: ${{ secrets.token != null && secrets.token || secrets.GITHUB_TOKEN }}
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4.1.0
+        uses: docker/setup-buildx-action@v4.3.0
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v6.1.0
+        uses: docker/metadata-action@v6.2.0
         with:
           # this is triggered by the schedule so we want to actually use the checked out information
           # and not the context from the workflow itself.
@@ -124,13 +124,13 @@ jobs:
             type=schedule,pattern=${{inputs.branch}}-{{date 'YYYY.MM.DD-hhmmss'}}
       - name: Log in to the Container registry
         id: login-ghcr
-        uses: docker/login-action@v4.2.0
+        uses: docker/login-action@v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.token != null && secrets.token || secrets.GITHUB_TOKEN }}
       - name: Build and push
-        uses: docker/build-push-action@v7.2.0
+        uses: docker/build-push-action@v7.3.0
         with:
           context: "."
           # This is not conditional on pull_request as we want access to these if we are manually running it.