diff --git a/.github/workflows/ci-gh-nightly-release.yml b/.github/workflows/ci-gh-nightly-release.yml
index 400091bc08..c8560628b2 100644
--- a/.github/workflows/ci-gh-nightly-release.yml
+++ b/.github/workflows/ci-gh-nightly-release.yml
@@ -237,7 +237,7 @@ jobs:
     steps:
       - &update-moving-branch-step
         name: Move ${{ env.MOVING_BRANCH }} forward
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const owner = context.repo.owner;
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 3c5143c38c..159eb08cfb 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -69,7 +69,7 @@ jobs:
           repositories: ${{ github.event.repository.name }}
 
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v46.0.1
+        uses: renovatebot/github-action@v46.0.2
         env:
           LOG_LEVEL: ${{ steps.config.outputs.log_level }}
           RENOVATE_DRY_RUN: ${{ steps.config.outputs.dry_run }}
diff --git a/.github/workflows/source-build-cpu.yml b/.github/workflows/source-build-cpu.yml
index a6ee7f8d63..99592c8d6a 100644
--- a/.github/workflows/source-build-cpu.yml
+++ b/.github/workflows/source-build-cpu.yml
@@ -90,7 +90,7 @@ jobs:
     steps:
       - if: github.repository_owner == 'nv-legate'
         name: Get AWS credentials for sccache bucket
-        uses: aws-actions/configure-aws-credentials@v5
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-region: us-east-2
           role-duration-seconds: 28800 # 8 hours
diff --git a/.github/workflows/source-build-gpu.yml b/.github/workflows/source-build-gpu.yml
index b46fbc7499..b7b114d583 100644
--- a/.github/workflows/source-build-gpu.yml
+++ b/.github/workflows/source-build-gpu.yml
@@ -93,7 +93,7 @@ jobs:
     steps:
       - if: github.repository_owner == 'nv-legate'
         name: Get AWS credentials for sccache bucket
-        uses: aws-actions/configure-aws-credentials@v5
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-region: us-east-2
           role-duration-seconds: 28800 # 8 hours
diff --git a/.github/workflows/wheels-build.yml b/.github/workflows/wheels-build.yml
index 887b9d52b5..13460d7fd0 100644
--- a/.github/workflows/wheels-build.yml
+++ b/.github/workflows/wheels-build.yml
@@ -111,7 +111,7 @@ jobs:
 
       - if: github.repository_owner == 'nv-legate'
         name: Get AWS credentials for sccache bucket
-        uses: aws-actions/configure-aws-credentials@v5
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-region: us-east-2
           role-duration-seconds: 28800 # 8 hours
diff --git a/.github/workflows/wheels-mac.yml b/.github/workflows/wheels-mac.yml
index cbbee76ac8..e123d598cf 100644
--- a/.github/workflows/wheels-mac.yml
+++ b/.github/workflows/wheels-mac.yml
@@ -89,7 +89,7 @@ jobs:
 
       - if: github.repository_owner == 'nv-legate'
         name: Get AWS credentials for sccache bucket
-        uses: aws-actions/configure-aws-credentials@v5
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-region: us-east-2
           role-duration-seconds: 28800 # 8 hours