diff --git a/.github/workflows/build-test.yaml b/.github/workflows/build-test.yaml
index febfe39..5b56c9f 100644
--- a/.github/workflows/build-test.yaml
+++ b/.github/workflows/build-test.yaml
@@ -13,8 +13,8 @@ jobs:
     name: "Build Binary"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v3"
-      - uses: "actions/setup-go@v3"
+      - uses: "actions/checkout@v4"
+      - uses: "actions/setup-go@v5"
         with:
           go-version: "^1.17"
       - uses: "authzed/actions/go-build@main"
@@ -23,15 +23,15 @@ jobs:
     name: "Build Container Image"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v3"
+      - uses: "actions/checkout@v4"
       - uses: "authzed/actions/docker-build@main"
 
   unit:
     name: "Run Unit Tests"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v3"
-      - uses: "actions/setup-go@v3"
+      - uses: "actions/checkout@v4"
+      - uses: "actions/setup-go@v5"
         with:
           go-version: "^1.17"
       - uses: "authzed/action-spicedb@v1"
diff --git a/.github/workflows/labeler.yaml b/.github/workflows/labeler.yaml
index a69770e..bb78301 100644
--- a/.github/workflows/labeler.yaml
+++ b/.github/workflows/labeler.yaml
@@ -6,7 +6,7 @@ jobs:
   triage:
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/labeler@v3"
+      - uses: "actions/labeler@v5"
         with:
           repo-token: "${{ secrets.GITHUB_TOKEN }}"
           sync-labels: true
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index fef7135..785e4ec 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -12,8 +12,8 @@ jobs:
     name: "Lint Go"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v3"
-      - uses: "actions/setup-go@v3"
+      - uses: "actions/checkout@v4"
+      - uses: "actions/setup-go@v5"
         with:
           go-version: "^1.17"
       - uses: "authzed/actions/gofumpt@main"
@@ -25,7 +25,7 @@ jobs:
     name: "Lint YAML & Markdown"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v3"
+      - uses: "actions/checkout@v4"
       - uses: "authzed/actions/yaml-lint@main"
       - uses: "authzed/actions/markdown-lint@main"
 
@@ -41,5 +41,5 @@ jobs:
       matrix:
         language: ["go"]
     steps:
-      - uses: "actions/checkout@v3"
+      - uses: "actions/checkout@v4"
       - uses: "authzed/actions/codeql@main"
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 21358e1..0e55395 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -9,7 +9,7 @@ jobs:
     name: "Publish Container Image"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v3"
+      - uses: "actions/checkout@v4"
       - uses: "battila7/get-version-action@v2"
         id: "get_version"
       - uses: "authzed/actions/docker-login@main"