diff --git a/.github/workflows/create_tags.yml b/.github/workflows/create_tags.yml
index 8b910bb..a281b1c 100644
--- a/.github/workflows/create_tags.yml
+++ b/.github/workflows/create_tags.yml
@@ -11,10 +11,10 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: '0'
-      - uses: robinraju/release-downloader@d6de084c58345d09b017e22701dbcf26977cfd14 # v1.6
+      - uses: robinraju/release-downloader@589f66e0b743641255594babae37479abb67e825 # v1.12 + node24 support
         with:
           repository: "fischerscode/tagger"
           fileName: "tagger.linux"
diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml
index 4b5a468..102c6b9 100644
--- a/.github/workflows/macos.yml
+++ b/.github/workflows/macos.yml
@@ -12,7 +12,7 @@ jobs:
   macOS-minimal:
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     - uses: ./
     # - name: Test EESSI
     #  run: |
diff --git a/.github/workflows/minimal-usage.yml b/.github/workflows/minimal-usage.yml
index 4872693..16a0788 100644
--- a/.github/workflows/minimal-usage.yml
+++ b/.github/workflows/minimal-usage.yml
@@ -21,7 +21,7 @@ jobs:
           - ubuntu-24.04
           - ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     - uses: ./
     - name: Test EESSI
       run: |
diff --git a/.github/workflows/minimal_usage_lmod_init.yml b/.github/workflows/minimal_usage_lmod_init.yml
index 62e45bf..7adb970 100644
--- a/.github/workflows/minimal_usage_lmod_init.yml
+++ b/.github/workflows/minimal_usage_lmod_init.yml
@@ -21,7 +21,7 @@ jobs:
           - ubuntu-24.04
           - ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     - uses: ./
       with:
         use_eessi_module: true
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index e97156f..c0cfc86 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -31,7 +31,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
 
@@ -58,7 +58,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: SARIF file
           path: results.sarif
diff --git a/.github/workflows/tensorflow-usage.yml b/.github/workflows/tensorflow-usage.yml
index afacfe4..6aa831b 100644
--- a/.github/workflows/tensorflow-usage.yml
+++ b/.github/workflows/tensorflow-usage.yml
@@ -9,7 +9,7 @@ jobs:
   tensorflow_usage:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     - uses: eessi/github-action-eessi@main
       with:
         eessi_stack_version: '2023.06'
diff --git a/README.md b/README.md
index 84cb79d..7401333 100644
--- a/README.md
+++ b/README.md
@@ -21,7 +21,7 @@ jobs:
   ubuntu-minimal:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - uses: eessi/github-action-eessi@v3
     - name: Test EESSI
       run: |
@@ -39,7 +39,7 @@ jobs:
           - ubuntu-24.04-arm
           - ubuntu-24.04
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - uses: eessi/github-action-eessi@v3
     - name: Test EESSI
       run: |
@@ -53,7 +53,7 @@ jobs:
   macOS-minimal:
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - uses: eessi/github-action-eessi@v3
     - name: Test EESSI
       run: |
@@ -78,7 +78,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - uses: eessi/github-action-eessi@v3
     - name: Test EESSI
       run: |
@@ -97,7 +97,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - uses: eessi/github-action-eessi@v3
     - name: Test EESSI
       run: |
diff --git a/action.yml b/action.yml
index 4135944..a015f66 100644
--- a/action.yml
+++ b/action.yml
@@ -24,7 +24,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - uses: cvmfs-contrib/github-action-cvmfs@f93ba85417fc145df0f82c672618dc7dd94c1702  # v5.2 + cache name update
+    - uses: cvmfs-contrib/github-action-cvmfs@10197e000cc0add8e54ac4fb73d3ed44e2de72b4 # v5.5
       with:
         # Can't use config package for macOS but our repos are available with the default configuration anyway
         # cvmfs_config_package: https://github.com/EESSI/filesystem-layer/releases/download/latest/cvmfs-config-eessi_latest_all.deb