diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml
index 5aefab66..a155fb94 100644
--- a/.github/workflows/release-pr.yml
+++ b/.github/workflows/release-pr.yml
@@ -5,17 +5,17 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
     - name: "pull code to release"
-      uses: "actions/checkout@v3"
+      uses: "actions/checkout@v4"
       with:
         path: "release"
         repository: "${{ inputs.release_repo }}"
     - name: "pull release library code"
-      uses: "actions/checkout@v3"
+      uses: "actions/checkout@v4"
       with:
         path: "lib"
         repository: "grafana/loki-release"
     - name: "setup go"
-      uses: "actions/setup-go@v4"
+      uses: "actions/setup-go@v5"
       with:
         cache-dependency-path: "release/go.sum"
         go-version-file: "release/go.mod"
@@ -120,12 +120,12 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
     - name: "pull code to release"
-      uses: "actions/checkout@v3"
+      uses: "actions/checkout@v4"
       with:
         path: "release"
         repository: "${{ inputs.release_repo }}"
     - name: "pull release library code"
-      uses: "actions/checkout@v3"
+      uses: "actions/checkout@v4"
       with:
         path: "lib"
         repository: "grafana/loki-release"
@@ -164,12 +164,12 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
     - name: "pull code to release"
-      uses: "actions/checkout@v3"
+      uses: "actions/checkout@v4"
       with:
         path: "release"
         repository: "${{ inputs.release_repo }}"
     - name: "setup go"
-      uses: "actions/setup-go@v4"
+      uses: "actions/setup-go@v5"
       with:
         cache-dependency-path: "release/go.sum"
         go-version-file: "release/go.mod"
@@ -206,17 +206,17 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
     - name: "pull code to release"
-      uses: "actions/checkout@v3"
+      uses: "actions/checkout@v4"
       with:
         path: "release"
         repository: "${{ inputs.release_repo }}"
     - name: "pull release library code"
-      uses: "actions/checkout@v3"
+      uses: "actions/checkout@v4"
       with:
         path: "lib"
         repository: "grafana/loki-release"
     - name: "setup go"
-      uses: "actions/setup-go@v4"
+      uses: "actions/setup-go@v5"
       with:
         cache-dependency-path: "release/go.sum"
         go-version-file: "release/go.mod"
@@ -301,12 +301,12 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
     - name: "pull code to release"
-      uses: "actions/checkout@v3"
+      uses: "actions/checkout@v4"
       with:
         path: "release"
         repository: "${{ inputs.release_repo }}"
     - name: "setup go"
-      uses: "actions/setup-go@v4"
+      uses: "actions/setup-go@v5"
       with:
         cache-dependency-path: "release/go.sum"
         go-version-file: "release/go.mod"
@@ -356,12 +356,12 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
     - name: "pull code to release"
-      uses: "actions/checkout@v3"
+      uses: "actions/checkout@v4"
       with:
         path: "release"
         repository: "${{ inputs.release_repo }}"
     - name: "setup go"
-      uses: "actions/setup-go@v4"
+      uses: "actions/setup-go@v5"
       with:
         cache-dependency-path: "release/go.sum"
         go-version-file: "release/go.mod"
@@ -407,17 +407,17 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
     - name: "pull code to release"
-      uses: "actions/checkout@v3"
+      uses: "actions/checkout@v4"
       with:
         path: "release"
         repository: "${{ inputs.release_repo }}"
     - name: "pull release library code"
-      uses: "actions/checkout@v3"
+      uses: "actions/checkout@v4"
       with:
         path: "lib"
         repository: "grafana/loki-release"
     - name: "setup go"
-      uses: "actions/setup-go@v4"
+      uses: "actions/setup-go@v5"
       with:
         cache-dependency-path: "release/go.sum"
         go-version-file: "release/go.mod"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d125d4f2..eacd9884 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,12 +5,12 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
     - name: "pull code to release"
-      uses: "actions/checkout@v3"
+      uses: "actions/checkout@v4"
       with:
         path: "release"
         repository: "${{ inputs.release_repo }}"
     - name: "pull release library code"
-      uses: "actions/checkout@v3"
+      uses: "actions/checkout@v4"
       with:
         path: "lib"
         repository: "grafana/loki-release"
diff --git a/workflows/lib/common.libsonnet b/workflows/lib/common.libsonnet
index 358e2ff1..5448b24d 100644
--- a/workflows/lib/common.libsonnet
+++ b/workflows/lib/common.libsonnet
@@ -50,18 +50,18 @@
                                             $.step.withWorkingDirectory('lib'),
 
   fetchReleaseRepo:
-    $.step.new('pull code to release', 'actions/checkout@v3')
+    $.step.new('pull code to release', 'actions/checkout@v4')
     + $.step.with({
       repository: '${{ inputs.release_repo }}',
       path: 'release',
     }),
   fetchReleaseLib:
-    $.step.new('pull release library code', 'actions/checkout@v3')
+    $.step.new('pull release library code', 'actions/checkout@v4')
     + $.step.with({
       repository: 'grafana/loki-release',
       path: 'lib',
     }),
-  setupGo: $.step.new('setup go', 'actions/setup-go@v4')
+  setupGo: $.step.new('setup go', 'actions/setup-go@v5')
            + $.step.with({
              'go-version-file': 'release/go.mod',
              'cache-dependency-path': 'release/go.sum',