diff --git a/.github/workflows/create-bosh-lite.yml b/.github/workflows/create-bosh-lite.yml
index 7e74e3164f2..cd28908c061 100644
--- a/.github/workflows/create-bosh-lite.yml
+++ b/.github/workflows/create-bosh-lite.yml
@@ -89,7 +89,7 @@ jobs:
           credentials_json: ${{ secrets.GCP_CREDENTIALS_JSON }}
 
       - name: Setup gcloud CLI
-        uses: google-github-actions/setup-gcloud@v1
+        uses: google-github-actions/setup-gcloud@v2
 
       - name: Save bbl state
         run: |
diff --git a/.github/workflows/delete-bosh-lite.yml b/.github/workflows/delete-bosh-lite.yml
index 4a469507ed1..b67c4ce0ec6 100644
--- a/.github/workflows/delete-bosh-lite.yml
+++ b/.github/workflows/delete-bosh-lite.yml
@@ -62,7 +62,7 @@ jobs:
           credentials_json: ${{ secrets.GCP_CREDENTIALS_JSON }}
 
       - name: Setup gcloud CLI
-        uses: google-github-actions/setup-gcloud@v1
+        uses: google-github-actions/setup-gcloud@v2
 
       - name: Download file from GCS
         run: |
diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index ee5d0933ed2..85289844747 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -33,7 +33,7 @@ jobs:
         with:
           go-version-file: go.mod
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v6
+        uses: golangci/golangci-lint-action@v8
         with:
           version: v1.64
           args: -v --exclude-dirs cf --exclude-dirs fixtures --exclude-dirs plugin --exclude-dirs command/plugin
diff --git a/.github/workflows/release-build-sign-upload.yml b/.github/workflows/release-build-sign-upload.yml
index 776430c7167..b3384bbdf06 100644
--- a/.github/workflows/release-build-sign-upload.yml
+++ b/.github/workflows/release-build-sign-upload.yml
@@ -771,7 +771,7 @@ jobs:
       uses: actions/checkout@v4
 
     - name: Download signed artifacts
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v5
       with:
         path: signed # download all artifacts to 'signed/'
 
@@ -894,7 +894,7 @@ jobs:
     steps:
 
     - name: Download Signed Linux Packages
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v5
       with:
         name: cf-cli-linux-rpm-packages
 
@@ -921,7 +921,7 @@ jobs:
     steps:
 
     - name: Download Signed Linux Packages
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v5
       with:
         name: cf-cli-linux-deb-packages
 
@@ -949,7 +949,7 @@ jobs:
     steps:
 
     - name: Download Signed macOS Packages
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v5
       with:
         name: cf-cli-macos-packages
 
@@ -973,7 +973,7 @@ jobs:
     steps:
 
     - name: Download Signed Windows Binaries
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v5
       with:
         name: cf-cli-windows-binaries
 
@@ -983,7 +983,7 @@ jobs:
         Get-AuthenticodeSignature -Verbose -ErrorAction Stop .\cf-cli_winx64.exe
 
     - name: Download Signed Windows Binaries
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v5
       with:
         name: cf-cli-windows-packages
 
@@ -1013,7 +1013,7 @@ jobs:
     - s3-upload
     steps:
     - name: Download signed artifacts
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v5
       with:
         name: final-artifacts
         path: ${{ env.ARTIFACTS_DIR }}
diff --git a/.github/workflows/tests-integration-reusable.yml b/.github/workflows/tests-integration-reusable.yml
index 2bd34671971..04916aceabe 100644
--- a/.github/workflows/tests-integration-reusable.yml
+++ b/.github/workflows/tests-integration-reusable.yml
@@ -78,7 +78,7 @@ jobs:
         credentials_json: ${{ secrets.GCP_CREDENTIALS_JSON }}
 
     - name: Setup gcloud CLI
-      uses: google-github-actions/setup-gcloud@v1
+      uses: google-github-actions/setup-gcloud@v2
 
     - name: Download file from GCS
       run: |