diff --git a/.github/workflows/book.yml b/.github/workflows/book.yml
index 0d191fd..4fdd709 100644
--- a/.github/workflows/book.yml
+++ b/.github/workflows/book.yml
@@ -16,9 +16,9 @@ jobs:
     if: github.repository == 'zhaofengli/attic'
 
     steps:
-      - uses: actions/checkout@v3.0.2
+      - uses: actions/checkout@v4.1.1
 
-      - uses: DeterminateSystems/nix-installer-action@v1
+      - uses: DeterminateSystems/nix-installer-action@v9
         continue-on-error: true # Self-hosted runners already have Nix installed
 
       - name: Install Attic
@@ -40,12 +40,12 @@ jobs:
           cp --recursive --dereference --no-preserve=mode,ownership result public
 
       - name: Upload book artifact
-        uses: actions/upload-pages-artifact@v1.0.7
+        uses: actions/upload-pages-artifact@v2.0.0
         with:
           path: public
 
       - name: Deploy book
-        uses: actions/deploy-pages@v1.2.3
+        uses: actions/deploy-pages@v3.0.1
 
       # TODO: Just take a diff of the list of store paths, also abstract all of this out
       - name: Push build artifacts
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 216e8c7..ef21aaf 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -17,9 +17,9 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
-      - uses: DeterminateSystems/nix-installer-action@v1
+      - uses: DeterminateSystems/nix-installer-action@v9
         continue-on-error: true # Self-hosted runners already have Nix installed
 
       - name: Install Attic
@@ -57,7 +57,7 @@ jobs:
               xargs attic push "ci:$ATTIC_CACHE"
           fi
       - name: Log in to the Container registry
-        uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9
+        uses: docker/login-action@v3.0.0
         if: runner.os == 'Linux' && github.event_name == 'push' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
         with:
           registry: ${{ env.REGISTRY }}