diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml
index e902a8d..d688b22 100644
--- a/.github/workflows/container.yml
+++ b/.github/workflows/container.yml
@@ -29,16 +29,16 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Log in to the Docker Hub container registry (for pulls)
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Log in to the GitHub container registry (for pushes)
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -46,12 +46,12 @@ jobs:
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@v5
         with:
           images: ghcr.io/penumbra-zone/galileo
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v5
         with:
           context: .
           platforms: linux/amd64
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index f9a6aa0..97acfd3 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -116,7 +116,7 @@ jobs:
     runs-on: buildjet-8vcpu-ubuntu-2004
     steps:
       - name: Checkout galileo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       # N.B. `cargo fmt` does not require relpath dependencies to be present,
       # so we don't need to clone the penumbra repo here.