diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index aa3379e..8901bf5 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -28,7 +28,7 @@ jobs:
 
       # Set up QEMU for cross-platform builds below
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
+        uses: docker/setup-qemu-action@v3
         with:
           image: tonistiigi/binfmt:latest
           platforms: all
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c09ccc3..58835d4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -28,7 +28,7 @@ jobs:
 
       # Set up QEMU for cross-platform builds below
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
+        uses: docker/setup-qemu-action@v3.2.0
         with:
           image: tonistiigi/binfmt:latest
           platforms: all
diff --git a/.github/workflows/render.yml b/.github/workflows/render.yml
index 052d7cf..d124619 100644
--- a/.github/workflows/render.yml
+++ b/.github/workflows/render.yml
@@ -41,7 +41,7 @@ jobs:
           echo output filename: ${filename}
 
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           fetch-tags: true
@@ -50,7 +50,7 @@ jobs:
       # key so that the cache is invalidated upon file change or container
       # version change.
       - name: Cache LaTeX files
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         env:
           cache-name: cache-latex-${{ inputs.input }}-files
         with: