diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f11926bdb0..9ecf275b54 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -23,7 +23,7 @@ jobs:
   fmt:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - run: rustup component add rustfmt
     - run: rustup update
     - run: cargo fmt --all --check
@@ -31,7 +31,7 @@ jobs:
   cackle:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: cackle-rs/cackle-action@997327f77e59d9cda7b0b6217f0fbdbd3f3ca904
       - run: cargo acl -n test
 
@@ -45,8 +45,8 @@ jobs:
     # Prevent sudden announcement of a new advisory from failing ci:
     continue-on-error: ${{ matrix.checks == 'advisories' }}
     steps:
-    - uses: actions/checkout@v3
-    - uses: EmbarkStudios/cargo-deny-action@1e59595bed8fc55c969333d08d7817b36888f0c5
+    - uses: actions/checkout@v4
+    - uses: EmbarkStudios/cargo-deny-action@8371184bd11e21dcf8ac82ebf8c9c9f74ebf7268
       with:
         command: check ${{ matrix.checks }}
         # leave arguments empty so we don't test --all-features
@@ -56,7 +56,7 @@ jobs:
   rust-check-git-rev-deps:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: stellar/actions/rust-check-git-rev-deps@main
 
   build:
@@ -89,7 +89,7 @@ jobs:
       # bother filing another.
       - name: Probe Cache
         id: cache
-        uses: actions/cache/restore@v3.3.1
+        uses: actions/cache/restore@v4.1.0
         with:
           path: ${{ env.CACHED_PATHS }}
           key: ${{ runner.os }}-${{ matrix.toolchain }}-${{ matrix.protocol }}-${{ github.sha }}
@@ -99,14 +99,14 @@ jobs:
       # This will restore the most-recently-written cache (github does this date ordering itself).
       - name: Restore Cache
         if: steps.cache.outputs.cache-hit != 'true'
-        uses: actions/cache/restore@v3.3.1
+        uses: actions/cache/restore@v4.1.0
         with:
           path: ${{ env.CACHED_PATHS }}
           key: ${{ steps.cache.outputs.cache-primary-key }}
           restore-keys: |
             ${{ runner.os }}-${{ matrix.toolchain }}-${{ matrix.protocol }}
 
-      - uses: actions/checkout@v3.5.2
+      - uses: actions/checkout@v4
         if: steps.cache.outputs.cache-hit != 'true'
         with:
            fetch-depth: 200
@@ -151,7 +151,7 @@ jobs:
           ./ci-build.sh --use-temp-db --protocol ${{ matrix.protocol }} ${{ matrix.scenario }}
 
       # We only _save_ to the cache when we had a cache miss, are running on master, and are the non-txmeta scenario.
-      - uses: actions/cache/save@v3.3.1
+      - uses: actions/cache/save@v4.1.0
         if: ${{ steps.cache.outputs.cache-hit != 'true' && github.ref_name == 'master' && matrix.scenario == ''}}
         with:
           path: ${{ env.CACHED_PATHS }}