diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 1acf60a..c128b3b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -55,11 +55,11 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
@@ -87,6 +87,6 @@ jobs:
         exit 1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4
       with:
         category: "/language:${{matrix.language}}"
diff --git a/action.yml b/action.yml
index 82269b3..ba136e9 100644
--- a/action.yml
+++ b/action.yml
@@ -125,7 +125,7 @@ runs:
 
   - name: Upload artifacts (logs)
     if: ${{ inputs.step == 'run-self-hosted-validation' }}
-    uses: actions/upload-artifact@v4
+    uses: actions/upload-artifact@v5
     with:
       name: logs
       path: |
@@ -140,7 +140,7 @@ runs:
 
   - name: Upload artifacts (benchmarks)
     if: ${{ inputs.step == 'run-self-hosted-validation' }}
-    uses: actions/upload-artifact@v4
+    uses: actions/upload-artifact@v5
     with:
       name: benchmarks
       path: |
@@ -151,7 +151,7 @@ runs:
 
   - name: Upload artifacts (results)
     if: ${{ inputs.step == 'run-self-hosted-validation' }}
-    uses: actions/upload-artifact@v4
+    uses: actions/upload-artifact@v5
     with:
       name: results
       path: |
@@ -177,7 +177,7 @@ runs:
 
   - name: Download artifacts
     if: ${{ inputs.step == 'create-comment' }}
-    uses: actions/download-artifact@v4
+    uses: actions/download-artifact@v6
 
   - name: Move artifacts to home directory
     if: ${{ inputs.step == 'create-comment' }}
@@ -223,7 +223,7 @@ runs:
 
   - name: Checkout model repo
     if: ${{ inputs.step == 'create-comment' }}
-    uses: actions/checkout@v4
+    uses: actions/checkout@v5
     with:
       fetch-depth: 0
       path: model-repo
@@ -255,7 +255,7 @@ runs:
 
   - name: Checkout validator repo
     if: ${{ inputs.step == 'create-comment' }}
-    uses: actions/checkout@v4
+    uses: actions/checkout@v5
     with:
       repository: lkstrp/pypsa-validator
       ref: ${{ github.repository }}
@@ -365,7 +365,7 @@ runs:
   - name: Retrieve or create comment
     if: ${{ inputs.step == 'create-comment' }}
     id: comment
-    uses: actions/github-script@v7
+    uses: actions/github-script@v8
     with:
       script: |
         const owner = context.repo.owner;
@@ -408,7 +408,7 @@ runs:
 
   - name: Update comment
     if: ${{ inputs.step == 'create-comment' }}
-    uses: actions/github-script@v7
+    uses: actions/github-script@v8
     with:
       script: |
         const fs = require('fs');