diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
index 27899cd9..4e0cd483 100644
--- a/.github/workflows/mirror.yml
+++ b/.github/workflows/mirror.yml
@@ -20,19 +20,19 @@ jobs:
       id-token: write
     steps:
       - name: configure aws credentials
-        uses: aws-actions/configure-aws-credentials@v1
+        uses: aws-actions/configure-aws-credentials@v5
         with:
           role-to-assume: ${{ secrets.PROD_AWS_ROLE }}
           aws-region: 'us-east-1'
-      - uses: docker/login-action@v2
+      - uses: docker/login-action@v3
         with:
           registry: public.ecr.aws
-      - uses: docker/login-action@v2
+      - uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
-      - uses: akhilerm/tag-push-action@v2.1.0
+      - uses: akhilerm/tag-push-action@v2.2.0
         with:
           src: docker.io/supabase/edge-runtime:${{ inputs.version }}
           dst: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bc8e2eb2..0d8e80f4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,7 +24,7 @@ jobs:
 
       - name: Semantic Release
         id: semantic
-        uses: cycjimmy/semantic-release-action@v3.4.1
+        uses: cycjimmy/semantic-release-action@v6.0.0
         with:
           semantic_version: 18
           extra_plugins: |
@@ -45,17 +45,17 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - id: meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@v5
         with:
           images: |
             supabase/edge-runtime
           tags: |
             type=raw,value=v${{ needs.release.outputs.version }}_${{ env.arch }}
 
-      - uses: docker/setup-buildx-action@v2
+      - uses: docker/setup-buildx-action@v3
 
       - name: Login to DockerHub
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
@@ -64,7 +64,7 @@ jobs:
         with:
           envFile: '.env'
       - id: build
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v6
         with:
           push: true
           platforms: linux/${{ env.arch }}
@@ -87,7 +87,7 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - id: meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@v5
         with:
           images: |
             supabase/edge-runtime
@@ -95,12 +95,12 @@ jobs:
             type=raw,value=v${{ needs.release.outputs.version }}_${{ env.arch }}
 
       - name: Login to DockerHub
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
-      - uses: docker/setup-buildx-action@v2
+      - uses: docker/setup-buildx-action@v3
         with:
           driver: docker
           driver-opts: |
@@ -111,7 +111,7 @@ jobs:
         with:
           envFile: '.env'
       - id: build
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v6
         with:
           context: .
           push: true
@@ -130,9 +130,9 @@ jobs:
       packages: write
       id-token: write
     steps:
-      - uses: docker/setup-buildx-action@v2
+      - uses: docker/setup-buildx-action@v3
 
-      - uses: docker/login-action@v2
+      - uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
@@ -143,25 +143,25 @@ jobs:
           supabase/edge-runtime@${{ needs.publish_x86.outputs.image_digest }} \
           supabase/edge-runtime@${{ needs.publish_arm.outputs.image_digest }}
       - name: configure aws credentials
-        uses: aws-actions/configure-aws-credentials@v1
+        uses: aws-actions/configure-aws-credentials@v5
         with:
           role-to-assume: ${{ secrets.PROD_AWS_ROLE }}
           aws-region: us-east-1
 
       - name: Login to ECR
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: public.ecr.aws
 
       - name: Login to GHCR
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Mirror to ECR
-        uses: akhilerm/tag-push-action@v2.0.0
+        uses: akhilerm/tag-push-action@v2.2.0
         with:
           src: docker.io/supabase/edge-runtime:v${{ needs.release.outputs.version }}
           dst: |