diff --git a/.github/workflows/build-push-test-docker-image.yml b/.github/workflows/build-push-test-docker-image.yml
index 2f6d6e77..a2b84935 100644
--- a/.github/workflows/build-push-test-docker-image.yml
+++ b/.github/workflows/build-push-test-docker-image.yml
@@ -13,7 +13,7 @@ jobs:
       packages: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       
       - name: Build the app
         uses: openconext/build-and-publish-test-container/php82-node20@main
@@ -21,13 +21,13 @@ jobs:
           use_yarn: true
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v4
+        uses: docker/setup-qemu-action@v4.1.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@v4.1.0
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v4.1.0
+        uses: docker/login-action@v4.2.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -35,7 +35,7 @@ jobs:
       
       - name: Set docker labels and tags
         id: meta
-        uses: docker/metadata-action@v6
+        uses: docker/metadata-action@v6.1.0
         with:
           images: ghcr.io/openconext/stepup-gateway/stepup-gateway
           flavor: |
@@ -48,7 +48,7 @@ jobs:
             type=raw,suffix=,value=test
 
       - name: Build and push the TEST image
-        uses: docker/build-push-action@v7.1.0
+        uses: docker/build-push-action@v7.2.0
         with:
           context: .
           file: docker/Dockerfile.test
diff --git a/.github/workflows/test-integration.yml b/.github/workflows/test-integration.yml
index 6e831bcd..aaf95f58 100644
--- a/.github/workflows/test-integration.yml
+++ b/.github/workflows/test-integration.yml
@@ -11,10 +11,10 @@ jobs:
         timeout-minutes: 30
         steps:
             - name: Checkout
-              uses: actions/checkout@v6
+              uses: actions/checkout@v7
 
             - name: Checkout devconf
-              uses: actions/checkout@v6
+              uses: actions/checkout@v7
               with:
                 repository: OpenConext/OpenConext-devconf
                 ref: main
@@ -26,7 +26,7 @@ jobs:
 
             - name: Cache Composer packages
               id: composer-cache
-              uses: actions/cache@v5
+              uses: actions/cache@v5.0.5
               with:
                 path: vendor
                 key: composer-${{ hashFiles('composer.lock') }}