diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c64292a1..c7f193e7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -37,21 +37,21 @@ jobs:
       - name: Create working dir archive
         run: "mkdir ./wdarch && tar --exclude='./wdarch' -czf ./wdarch/working-dir-build-cache.tar.gz ."
       - name: Cache working directory with build results
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: working-dir-build-cache
           path: ./wdarch/working-dir-build-cache.tar.gz
           retention-days: 1 # No need to waste space when this artifact is only used as part of the build process
 
       - name: Agent artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: elastic-otel-javaagent
           path: |
             ./agent/build/libs/elastic-otel-javaagent-*.jar
 
       - name: Agent extension artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: elastic-otel-agentextension
           path: |
@@ -89,7 +89,7 @@ jobs:
     steps:
       # We use the cached working directory so that we don't have to recompile everything
       - name: Download cached build working directory
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: working-dir-build-cache
           path: ./
@@ -105,7 +105,7 @@ jobs:
           command: "./gradlew test -x compileJni -PtestJavaVersion=${{ matrix.version }} -PtestJavaVM=${{ matrix.vm }}"
       - name: Store test results
         if: success() || failure()
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: test-results-${{ matrix.version }}-${{ matrix.vm }}
           path: '**/build/test-results/test/TEST-*.xml'
diff --git a/.github/workflows/release-step-3.yml b/.github/workflows/release-step-3.yml
index ec08c2d6..7111aee9 100644
--- a/.github/workflows/release-step-3.yml
+++ b/.github/workflows/release-step-3.yml
@@ -102,7 +102,7 @@ jobs:
         run: tar xvf ${{ env.TARBALL_FILE }}
 
       - name: generate build provenance
-        uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f  # v3.2.0
+        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32  # v4.1.0
         with:
           subject-path: "${{ github.workspace }}/**/*.jar"
 
@@ -187,7 +187,7 @@ jobs:
             EXTENSION_JAR_FILE=elastic-otel-agentextension.jar
 
       - name: generate build provenance (containers)
-        uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f  # v3.2.0
+        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32  # v4.1.0
         with:
           subject-name: "${{ env.DOCKER_IMAGE_NAME }}"
           subject-digest: ${{ steps.push.outputs.digest }}
diff --git a/.github/workflows/snapshot.yml b/.github/workflows/snapshot.yml
index 887056f5..d7e5f252 100644
--- a/.github/workflows/snapshot.yml
+++ b/.github/workflows/snapshot.yml
@@ -75,7 +75,7 @@ jobs:
         run: tar xvf ${{ env.TARBALL_FILE }}
 
       - name: generate build provenance
-        uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f  # v3.2.0
+        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32  # v4.1.0
         with:
           subject-path: "${{ github.workspace }}/**/*.jar"