diff --git a/.github/actions/container-build-push/action.yaml b/.github/actions/container-build-push/action.yaml
index f5c04a162..5c6480ea4 100644
--- a/.github/actions/container-build-push/action.yaml
+++ b/.github/actions/container-build-push/action.yaml
@@ -76,7 +76,7 @@ runs:
         test -f $CONTAINERFILE
     - name: Get required Vault secrets
       id: secrets
-      uses: hashicorp/vault-action@v3
+      uses: hashicorp/vault-action@v4
       with:
         url: ${{ inputs.vault-url }}
         method: jwt
@@ -86,7 +86,7 @@ runs:
           ${{ inputs.aws-creds-vault-path }} aws_ecr_access_key | AWS_ACCESS_KEY ;
           ${{ inputs.aws-creds-vault-path }} aws_ecr_secret_key | AWS_SECRET_KEY ;
     - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v4
+      uses: aws-actions/configure-aws-credentials@v6
       with:
         aws-access-key-id: ${{ env.AWS_ACCESS_KEY }}
         aws-secret-access-key: ${{ env.AWS_SECRET_KEY }}
diff --git a/.github/actions/helm-push/action.yaml b/.github/actions/helm-push/action.yaml
index 035218aa3..994011dc1 100644
--- a/.github/actions/helm-push/action.yaml
+++ b/.github/actions/helm-push/action.yaml
@@ -59,15 +59,15 @@ runs:
   steps:
     - name: Checkout code
       if: ${{ inputs.checkout-code == 'true' }}
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
     - name: Install helm binary
-      uses: azure/setup-helm@v4
+      uses: azure/setup-helm@v5
       with:
         version: 'v3.12.1'
     - name: Get required Vault secrets
       if: ${{ inputs.dry-run == 'false' }}
       id: secrets
-      uses: hashicorp/vault-action@v3
+      uses: hashicorp/vault-action@v4
       with:
         url: ${{ inputs.vault-url }}
         method: jwt
@@ -78,7 +78,7 @@ runs:
           ${{ inputs.aws-creds-vault-path }} aws_ecr_secret_key | AWS_SECRET_KEY ;
     - name: Configure AWS credentials
       if: ${{ inputs.dry-run == 'false' }}
-      uses: aws-actions/configure-aws-credentials@v4
+      uses: aws-actions/configure-aws-credentials@v6
       with:
         aws-access-key-id: ${{ env.AWS_ACCESS_KEY }}
         aws-secret-access-key: ${{ env.AWS_SECRET_KEY }}
diff --git a/.github/actions/rundeck/action.yaml b/.github/actions/rundeck/action.yaml
index 39694a523..5a8106794 100644
--- a/.github/actions/rundeck/action.yaml
+++ b/.github/actions/rundeck/action.yaml
@@ -45,7 +45,7 @@ runs:
         echo "${{ steps.cert-from-vault.outputs.private_key }}" >> cert.pem
       shell: bash
     - name: Setup python
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@v7
       with:
         python-version: "3.12"
     - name: Install modules
diff --git a/.github/workflows/build-helmreleases.yaml b/.github/workflows/build-helmreleases.yaml
index 0374e6c13..f766510f0 100644
--- a/.github/workflows/build-helmreleases.yaml
+++ b/.github/workflows/build-helmreleases.yaml
@@ -45,7 +45,7 @@ jobs:
       updated_prod_cluster_names: ${{ steps.extract-updated-prod-names.outputs.updated_prod_names }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Get built charts
         id: get-built-charts
@@ -91,7 +91,7 @@ jobs:
           echo "charts=$(echo "$prepared_charts" | jq -c)" >> $GITHUB_OUTPUT
 
       - name: Checkout gitops-deployments
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           repository: gooddata/gitops-deployments
           token: ${{ secrets.TOKEN_GITHUB_YENKINS }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b81466ff9..56619827d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -6,16 +6,16 @@ jobs:
   jruby-gem-release:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: jruby-9.4.12.1
           bundler-cache: true
-      - uses: actions/setup-java@v4
+      - uses: actions/setup-java@v6
         with:
           java-version: '8'
           distribution: 'adopt'
-      - uses: actions/cache@v4
+      - uses: actions/cache@v6
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -27,7 +27,7 @@ jobs:
   rubygems-release:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: 3.2.1
@@ -43,7 +43,7 @@ jobs:
       matrix:
         ruby-version: [3.2.1, jruby-9.4.12.1]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: ${{ matrix.ruby-version }}
diff --git a/.github/workflows/chart-validation.yaml b/.github/workflows/chart-validation.yaml
index 2964e7992..90ccf2dac 100644
--- a/.github/workflows/chart-validation.yaml
+++ b/.github/workflows/chart-validation.yaml
@@ -19,7 +19,7 @@ jobs:
       labels: runners-small
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/check-extended.yaml b/.github/workflows/check-extended.yaml
index 5987df0e9..80d304431 100644
--- a/.github/workflows/check-extended.yaml
+++ b/.github/workflows/check-extended.yaml
@@ -31,12 +31,12 @@ jobs:
             jq --raw-output .head.sha)
           echo "commit=$pr_head_sha" >> "$GITHUB_OUTPUT"
                                 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: refs/pull/${{ github.event.issue.number }}/merge
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@v45
+        uses: tj-actions/changed-files@v47
     if: ${{ github.event.issue.pull_request && startsWith(github.event.comment.body, 'extended test') }}
   gooddata-ruby-integration-tests-zuul:
     runs-on:
diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
index 589f5cb07..6c2ea88fe 100644
--- a/.github/workflows/check.yaml
+++ b/.github/workflows/check.yaml
@@ -18,12 +18,12 @@ jobs:
       project: ${{ github.repository }}
       changed_files: ${{ steps.changed-files.outputs.all_changed_files }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Configure git safe directory
         run: git config --global --add safe.directory '*'
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@v45
+        uses: tj-actions/changed-files@v47
 
   gooddata-ruby-lcm-build-pipeline:
     needs:
diff --git a/.github/workflows/create-gitops-deployments-pr.yaml b/.github/workflows/create-gitops-deployments-pr.yaml
index 393c20262..d0de11094 100644
--- a/.github/workflows/create-gitops-deployments-pr.yaml
+++ b/.github/workflows/create-gitops-deployments-pr.yaml
@@ -86,7 +86,7 @@ jobs:
           echo "EOF" >> $GITHUB_OUTPUT
 
       - name: Checkout gitops-deployments repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           repository: gooddata/gitops-deployments
           token: ${{ secrets.TOKEN_GITHUB_YENKINS }}
@@ -168,7 +168,7 @@ jobs:
 
       - name: Commit and push
         id: commit-and-push
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@v11
         with:
           message: ${{ steps.prepare-pr-metadata.outputs.commit_message }}
           author_name: "yenkins"
@@ -205,7 +205,7 @@ jobs:
 
       - name: Upload PR URL
         if: ${{ steps.commit-and-push.outputs.committed == 'true' && inputs.is_staging == false && inputs.is_auto_merge == true }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: "${{ inputs.cluster }}_pr_url"
           path: "${{ inputs.cluster }}_pr_url.txt"
diff --git a/.github/workflows/create-pr-comment.yaml b/.github/workflows/create-pr-comment.yaml
index dff38067a..7fb1dd505 100644
--- a/.github/workflows/create-pr-comment.yaml
+++ b/.github/workflows/create-pr-comment.yaml
@@ -26,14 +26,14 @@ jobs:
       labels: runners-small
     steps:
       - name: Checkout gitops-deployments
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           repository: gooddata/gitops-deployments
           token: ${{ secrets.TOKEN_GITHUB_YENKINS }}
 
       - name: Download PR URLs
         if: ${{ inputs.AUTO_MERGE == true }}
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v8
         with:
           path: pr_urls
           pattern: "*_pr_url"
@@ -96,7 +96,7 @@ jobs:
           fi
 
       - name: Comment PR
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const prNumber = ${{ inputs.triggering_pr_number }};
diff --git a/.github/workflows/dockerfile-validation.yaml b/.github/workflows/dockerfile-validation.yaml
index 0ad0fe9f1..6936877a9 100644
--- a/.github/workflows/dockerfile-validation.yaml
+++ b/.github/workflows/dockerfile-validation.yaml
@@ -14,7 +14,7 @@ jobs:
       labels: runners-small
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
       - name: Read component configuration
         id: load-config
         run: |
diff --git a/.github/workflows/gate.yaml b/.github/workflows/gate.yaml
index 1df6157e7..3422350a1 100644
--- a/.github/workflows/gate.yaml
+++ b/.github/workflows/gate.yaml
@@ -16,10 +16,10 @@ jobs:
       project: ${{ github.repository }}
       changed_files: ${{ steps.changed-files.outputs.all_changed_files }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@v45
+        uses: tj-actions/changed-files@v47
       - name: Branch name
         id: branch
         run: |-
diff --git a/.github/workflows/lcm-integration-e2e.yaml b/.github/workflows/lcm-integration-e2e.yaml
index 352312651..83edc99cd 100644
--- a/.github/workflows/lcm-integration-e2e.yaml
+++ b/.github/workflows/lcm-integration-e2e.yaml
@@ -28,7 +28,7 @@ jobs:
           echo "${JAVA_HOME}/bin" >> $GITHUB_PATH
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           submodules: 'true'
           token: ${{ secrets.TOKEN_GITHUB_YENKINS }}
diff --git a/.github/workflows/lcm-pipeline.yaml b/.github/workflows/lcm-pipeline.yaml
index 32e9117f1..0f72f7039 100644
--- a/.github/workflows/lcm-pipeline.yaml
+++ b/.github/workflows/lcm-pipeline.yaml
@@ -37,18 +37,18 @@ jobs:
       pipeline_identifier: ${{ github.run_id }}
       service_version: ${{ steps.read-version.outputs.service_version }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           submodules: 'true'
           token: ${{ secrets.TOKEN_GITHUB_YENKINS }}
       - name: Detect changed images
         id: filter
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@v4
         with:
           filters: ".github/service-filters.yml"
       - name: Detect changed helm charts
         id: chart-filter
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@v4
         with:
           filters: ".github/chart-filters.yml"
       - name: Generate image tag
@@ -102,7 +102,7 @@ jobs:
         component: ${{ fromJSON(needs.prepare-build.outputs.images) }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           submodules: 'true'
           token: ${{ secrets.TOKEN_GITHUB_YENKINS }}
@@ -155,7 +155,7 @@ jobs:
         charts: ${{ fromJSON(needs.prepare-build.outputs.charts) }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           submodules: 'true'
           token: ${{ secrets.TOKEN_GITHUB_YENKINS }}
@@ -181,7 +181,7 @@ jobs:
       needs.prepare-build.outputs.images != ''
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
       - name: Register bricks to staging
         uses: ./.github/actions/rundeck
         with:
diff --git a/.github/workflows/lcm-stable-retag.yaml b/.github/workflows/lcm-stable-retag.yaml
index 638740525..891412c21 100644
--- a/.github/workflows/lcm-stable-retag.yaml
+++ b/.github/workflows/lcm-stable-retag.yaml
@@ -48,7 +48,7 @@ jobs:
       clusters: "na1 ca2 perf1 bom1 syd1 na3 eu1 fra1"
     steps:
       - name: Get required Vault secrets
-        uses: hashicorp/vault-action@v3
+        uses: hashicorp/vault-action@v4
         with:
           url: ${{ secrets.VAULT_ADDRESS }}
           method: jwt
@@ -59,7 +59,7 @@ jobs:
             secret/data/v3/int/ecr/infra1-user-ecr-rw aws_ecr_secret_key | AWS_SECRET_KEY ;
 
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-access-key-id: ${{ env.AWS_ACCESS_KEY }}
           aws-secret-access-key: ${{ env.AWS_SECRET_KEY }}
diff --git a/.github/workflows/pre-merge.yml b/.github/workflows/pre-merge.yml
index 8f975f27f..521a435c1 100644
--- a/.github/workflows/pre-merge.yml
+++ b/.github/workflows/pre-merge.yml
@@ -11,7 +11,7 @@ jobs:
       matrix:
         ruby-version: [2.5, 2.6, 2.7.6, 3.2.1, jruby-9.2.21, jruby-9.3.14, jruby-9.4.12.1]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: ${{ matrix.ruby-version }}
diff --git a/.github/workflows/promote-to-stable.yaml b/.github/workflows/promote-to-stable.yaml
index 36e02c4ca..62131b6ca 100644
--- a/.github/workflows/promote-to-stable.yaml
+++ b/.github/workflows/promote-to-stable.yaml
@@ -24,7 +24,7 @@ jobs:
       INFRA_REPO_URL: ${{ secrets.ECR_URL }}
     steps:
       - name: Get required Vault secrets
-        uses: hashicorp/vault-action@v3
+        uses: hashicorp/vault-action@v4
         with:
           url: ${{ secrets.VAULT_ADDRESS }}
           method: jwt
@@ -35,7 +35,7 @@ jobs:
             secret/data/v2/data-special/infra1-user-ecr-rw aws_ecr_secret_key | AWS_SECRET_KEY ;
 
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-access-key-id: ${{ env.AWS_ACCESS_KEY }}
           aws-secret-access-key: ${{ env.AWS_SECRET_KEY }}
diff --git a/.github/workflows/revert-staging-pr.yaml b/.github/workflows/revert-staging-pr.yaml
index 0c2b9b418..c69207791 100644
--- a/.github/workflows/revert-staging-pr.yaml
+++ b/.github/workflows/revert-staging-pr.yaml
@@ -18,7 +18,7 @@ jobs:
       labels: runners-small
     steps:
       - name: Checkout gitops-deployments
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           repository: gooddata/gitops-deployments
           token: ${{ secrets.TOKEN_GITHUB_YENKINS }}