diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a6f3b5f..6467560 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ jobs:
     steps:
 
     - name: Check out code
-      uses: actions/checkout@v4
+      uses: actions/checkout@v7
       with:
         path: src/github.com/containerd/containerd.io
         fetch-depth: 25
diff --git a/.github/workflows/sync-documentation.yml b/.github/workflows/sync-documentation.yml
index 15d59ff..80f87a6 100644
--- a/.github/workflows/sync-documentation.yml
+++ b/.github/workflows/sync-documentation.yml
@@ -8,9 +8,9 @@ on:
 
 jobs:
   update-documentationmd:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Record submodule state
         run: ./tools/check-submodule-docs.sh record > /tmp/old_submodules.txt
       - name: Update documentation
@@ -33,7 +33,7 @@ jobs:
           fi
       - name: Create Pull Request
         if: steps.verify_changes.outputs.has_changes == 'true'
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: |
diff --git a/.github/workflows/sync-releases.yml b/.github/workflows/sync-releases.yml
index fc23abe..245fc1e 100644
--- a/.github/workflows/sync-releases.yml
+++ b/.github/workflows/sync-releases.yml
@@ -7,9 +7,9 @@ on:
 
 jobs:
   update-releasesmd:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Update dependencies
         id: vars
         run: |
@@ -20,7 +20,7 @@ jobs:
           sed -i'' 's,^### GRPC API,### GRPC API {#grpc},' content/releases.md
           sed -i'' 's,\./docs/,https://github.com/containerd/containerd/blob/main/docs/,' content/releases.md
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: |