diff --git a/.github/workflows/check-dist.yml b/.github/workflows/check-dist.yml
index acc938d2..1428e203 100644
--- a/.github/workflows/check-dist.yml
+++ b/.github/workflows/check-dist.yml
@@ -24,8 +24,8 @@ jobs:
         working-directory: actions/spa-setup-task
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: '20'
       - run: yarn install
@@ -41,7 +41,7 @@ jobs:
         id: diff
 
       # If index.js was different than expected, upload the expected version as an artifact
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v5
         if: ${{ failure() && steps.diff.conclusion == 'failure' }}
         with:
           name: dist
diff --git a/.github/workflows/master.yaml b/.github/workflows/master.yaml
index cbf829ce..b36ad498 100644
--- a/.github/workflows/master.yaml
+++ b/.github/workflows/master.yaml
@@ -36,8 +36,8 @@ jobs:
           - component: canary-deployer
             chart: true
     steps:
-      - uses: actions/checkout@v4 # ratchet:exclude
-      - uses: azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 # ratchet:azure/setup-helm@v3
+      - uses: actions/checkout@v6 # ratchet:exclude
+      - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # ratchet:azure/setup-helm@v3
         if: matrix.chart
         with:
           version: "v3.11.1"
@@ -78,7 +78,7 @@ jobs:
       - name: "Authenticate to Google Cloud"
         if: matrix.chart && github.ref == 'refs/heads/master'
         id: "auth"
-        uses: "google-github-actions/auth@v2" # ratchet:exclude
+        uses: "google-github-actions/auth@v3" # ratchet:exclude
         with:
           workload_identity_provider: ${{ secrets.NAIS_IO_WORKLOAD_IDENTITY_PROVIDER }}
           service_account: "gh-deploy@nais-io.iam.gserviceaccount.com"
@@ -136,9 +136,9 @@ jobs:
       - build_and_push
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4 # ratchet:exclude
+      - uses: actions/checkout@v6 # ratchet:exclude
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version: 'stable'
 
diff --git a/.github/workflows/test-job.yaml b/.github/workflows/test-job.yaml
index 0335f148..544ce3e9 100644
--- a/.github/workflows/test-job.yaml
+++ b/.github/workflows/test-job.yaml
@@ -13,7 +13,7 @@ jobs:
     name: Deploy to NAIS
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: deploy to ${{ github.event.inputs.cluster }}
       uses: nais/deploy/actions/deploy@v2
       env:
diff --git a/.github/workflows/test-naisjob-without-schedule.yaml b/.github/workflows/test-naisjob-without-schedule.yaml
index d119d5d9..1b71a000 100644
--- a/.github/workflows/test-naisjob-without-schedule.yaml
+++ b/.github/workflows/test-naisjob-without-schedule.yaml
@@ -15,7 +15,7 @@ jobs:
       contents: read
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: deploy to ${{ github.event.inputs.cluster }}
       uses: nais/deploy/actions/deploy@v2
       env:
diff --git a/.github/workflows/test-naisjob.yaml b/.github/workflows/test-naisjob.yaml
index 23a32631..0d50cb70 100644
--- a/.github/workflows/test-naisjob.yaml
+++ b/.github/workflows/test-naisjob.yaml
@@ -13,7 +13,7 @@ jobs:
     name: Deploy to NAIS
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: deploy to ${{ github.event.inputs.cluster }}
       uses: nais/deploy/actions/deploy@v2
       env: