diff --git a/.github/workflows/publish_images.yml b/.github/workflows/publish_images.yml
index 0b9cf1a0..d1e55136 100644
--- a/.github/workflows/publish_images.yml
+++ b/.github/workflows/publish_images.yml
@@ -19,10 +19,10 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Harbor connectivity probe
         run: |
@@ -36,7 +36,7 @@ jobs:
           sudo sysctl -w net.ipv6.conf.default.disable_ipv6=1
 
       - name: Log in to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
@@ -55,14 +55,14 @@ jobs:
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: |
             hbpmip/platform-ui
             ${{ env.HARBOR_REGISTRY }}/medical-informatics-platform/platform-ui
 
       - name: Load PLATFORM-UI service cached image
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: /tmp/.buildx-cache/platform-ui
           key: ${{ runner.os }}-buildx-platform-ui-${{ hashFiles('Dockerfile', 'nginx.conf.template', 'package.json', 'package-lock.json', 'angular.json', 'src/**', 'public/**') }}
@@ -70,7 +70,7 @@ jobs:
             ${{ runner.os }}-buildx-platform-ui-
 
       - name: Build PLATFORM-UI docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: ./Dockerfile
diff --git a/.github/workflows/sca_app.yml b/.github/workflows/sca_app.yml
index 438cfb6a..7454d208 100644
--- a/.github/workflows/sca_app.yml
+++ b/.github/workflows/sca_app.yml
@@ -20,10 +20,10 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Set up Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 #v6.3.0
         with:
           # renovate: datasource=python-version depName=python
           python-version: '3.14.4'
diff --git a/.github/workflows/sca_image.yml b/.github/workflows/sca_image.yml
index 6f5255e7..609dd458 100644
--- a/.github/workflows/sca_image.yml
+++ b/.github/workflows/sca_image.yml
@@ -20,10 +20,10 @@ jobs:
     
     steps:
       - name: Check out repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Set up Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 #v6.3.0
         with:
           # renovate: datasource=python-version depName=python
           python-version: '3.14.4'