diff --git a/.github/workflows/demo/pr-compressed-size.yml b/.github/workflows/demo/pr-compressed-size.yml
index 544b3138..f2789a28 100644
--- a/.github/workflows/demo/pr-compressed-size.yml
+++ b/.github/workflows/demo/pr-compressed-size.yml
@@ -8,7 +8,7 @@ jobs:
   compressed-size:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           submodules: recursive
       - uses: 94dreamer/compressed-size-action@master
diff --git a/.github/workflows/issue-mark-duplicate.temp.yml b/.github/workflows/issue-mark-duplicate.temp.yml
index 30177232..a0f40835 100644
--- a/.github/workflows/issue-mark-duplicate.temp.yml
+++ b/.github/workflows/issue-mark-duplicate.temp.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: mark-duplicate
-        uses: actions-cool/issues-helper@v2
+        uses: actions-cool/issues-helper@v3
         with:
           actions: "mark-duplicate"
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/issue-reply.temp.yml b/.github/workflows/issue-reply.temp.yml
index 271a94f5..b6f13edc 100644
--- a/.github/workflows/issue-reply.temp.yml
+++ b/.github/workflows/issue-reply.temp.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Need Reproduce
         if: github.event.label.name == 'Need Reproduce'
-        uses: actions-cool/issues-helper@v2
+        uses: actions-cool/issues-helper@v3
         with:
           actions: 'create-comment'
           issue-number: ${{ github.event.issue.number }}
diff --git a/.github/workflows/issues-dailyclose-schedule.yml b/.github/workflows/issues-dailyclose-schedule.yml
index 861234f6..08f5fc95 100644
--- a/.github/workflows/issues-dailyclose-schedule.yml
+++ b/.github/workflows/issues-dailyclose-schedule.yml
@@ -9,9 +9,11 @@ on:
 
 jobs:
   create-report:
+    # prevents this action from running on forks
+    if: github.repository == 'Tencent/tdesign' 
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - uses: TDesignOteam/create-report@main
         with:
           wxhook: ${{ secrets.WX_HOOK_URL }}
diff --git a/.github/workflows/issues-dailynew-schedule.yml b/.github/workflows/issues-dailynew-schedule.yml
index 7655be5f..ed4bea14 100644
--- a/.github/workflows/issues-dailynew-schedule.yml
+++ b/.github/workflows/issues-dailynew-schedule.yml
@@ -9,9 +9,11 @@ on:
 
 jobs:
   create-report:
+    # prevents this action from running on forks
+    if: github.repository == 'Tencent/tdesign' 
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - uses: TDesignOteam/create-report@main
         with:
           wxhook: ${{ secrets.WX_HOOK_URL }}
diff --git a/.github/workflows/issues-statistics-schedule.yml b/.github/workflows/issues-statistics-schedule.yml
index 535addcb..20f7f556 100644
--- a/.github/workflows/issues-statistics-schedule.yml
+++ b/.github/workflows/issues-statistics-schedule.yml
@@ -9,9 +9,11 @@ on:
 
 jobs:
   create-report:
+    # prevents this action from running on forks
+    if: github.repository == 'Tencent/tdesign' 
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - uses: TDesignOteam/create-report@main
         with:
           wxhook: ${{ secrets.WX_HOOK_URL }}
diff --git a/.github/workflows/pr-spelling.template.yml b/.github/workflows/pr-spelling.template.yml
index e634e5c5..84abbc4e 100644
--- a/.github/workflows/pr-spelling.template.yml
+++ b/.github/workflows/pr-spelling.template.yml
@@ -7,7 +7,7 @@ jobs:
     name: Spell Check with Typos
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Check spelling
         uses: crate-ci/typos@master
         with:
diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index 07bfa81d..881c5135 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -14,7 +14,7 @@ jobs:
       github.event.workflow_run.conclusion == 'success'
     steps:
       - name: download pr artifact
-        uses: dawidd6/action-download-artifact@v2
+        uses: dawidd6/action-download-artifact@v6
         with:
           workflow: ${{ github.event.workflow_run.workflow_id }}
           run_id: ${{ github.event.workflow_run.id }}
@@ -23,7 +23,7 @@ jobs:
         id: pr
         run: echo "id=$(<pr-id.txt)" >> $GITHUB_OUTPUT
       - name: download _site artifact
-        uses: dawidd6/action-download-artifact@v2
+        uses: dawidd6/action-download-artifact@v6
         with:
           workflow: ${{ github.event.workflow_run.workflow_id }}
           run_id: ${{ github.event.workflow_run.id }}
@@ -72,7 +72,7 @@ jobs:
       github.event.workflow_run.conclusion == 'failure'
     steps:
       - name: download pr artifact
-        uses: dawidd6/action-download-artifact@v2
+        uses: dawidd6/action-download-artifact@v6
         with:
           workflow: ${{ github.event.workflow_run.workflow_id }}
           run_id: ${{ github.event.workflow_run.id }}
diff --git a/.github/workflows/publish-components.yml b/.github/workflows/publish-components.yml
index 155da11b..ae50afe4 100644
--- a/.github/workflows/publish-components.yml
+++ b/.github/workflows/publish-components.yml
@@ -12,7 +12,7 @@ jobs:
     outputs:
       components-changed: ${{ steps.components-changed.outputs.changed }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 100
       - uses: marceloprado/has-changed-path@v1
@@ -26,14 +26,14 @@ jobs:
     needs: modify-components
     if: needs.modify-components.outputs.components-changed == 'true'
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v2
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: 18
           registry-url: "https://registry.npmjs.org"
-      - uses: pnpm/action-setup@v2
+      - uses: pnpm/action-setup@v4
         with:
-          version: 6.0.2
+          version: 9
       - run: pnpm install
       - run: cd packages/components && npm run build
       - run: cd packages/components && npm publish
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 666bd91e..14d75cf4 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -15,13 +15,13 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.ref_type == 'tag'
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: recursive
-      - uses: actions/setup-node@v2
+      - uses: actions/setup-node@v4
         with:
           node-version: 18
-      - uses: actions/cache@v2
+      - uses: actions/cache@v4
         env:
           cache-name: cache-nodemodules
         with:
@@ -49,7 +49,7 @@ jobs:
       - run: npm run build
       - name: publish
         id: publish
-        uses: JS-DevTools/npm-publish@v1
+        uses: JS-DevTools/npm-publish@v3
         with:
           token: ${{ secrets.TDESIGN_NPM_TOKEN }}
           tag: ${{ contains(github.ref_name, 'beta') && 'beta' || 'latest' }}
@@ -60,7 +60,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.ref_type == 'tag'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: main
           fetch-depth: 0
diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index 99a281a7..2de2ac78 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -12,7 +12,7 @@ jobs:
     outputs:
       services-changed: ${{ steps.services-changed.outputs.changed }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 100
       - uses: marceloprado/has-changed-path@v1
@@ -26,8 +26,8 @@ jobs:
     needs: modify-services
     if: needs.modify-services.outputs.services-changed == 'true'
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v2
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: 18
       - run: node ./services/update-components-notice.js
diff --git a/.github/workflows/service-update-schedule.yml b/.github/workflows/service-update-schedule.yml
index 59b28755..86d0e9fb 100644
--- a/.github/workflows/service-update-schedule.yml
+++ b/.github/workflows/service-update-schedule.yml
@@ -13,8 +13,8 @@ jobs:
     if: github.repository == 'Tencent/tdesign' 
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v2
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: 18
       - run: node ./services/update-components-notice.js
diff --git a/.github/workflows/test-build-site.yml b/.github/workflows/test-build-site.yml
index e0d07fed..e706172c 100644
--- a/.github/workflows/test-build-site.yml
+++ b/.github/workflows/test-build-site.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     # needs: test
     steps:
-      - uses: pnpm/action-setup@v3
+      - uses: pnpm/action-setup@v4
         with:
           version: 9
       - uses: actions/checkout@v4