diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock
index 41e85bb..0639356 100644
--- a/.github/workflows/actions.lock
+++ b/.github/workflows/actions.lock
@@ -9,12 +9,12 @@ workflows:
         - 'actions/cache@v6.1.0'
         - 'actions/checkout@v7.0.1'
         - 'actions/configure-pages@v6.0.0'
-        - 'actions/deploy-pages@v5.0.0'
+        - 'actions/deploy-pages@v5.0.1'
         - 'actions/upload-pages-artifact@v5.0.0'
         - 'haskell-actions/setup@v2.12.0'
     '.github/workflows/codeql.yml':
         - 'actions/checkout@v7.0.1'
-        - 'github/codeql-action@v4.37.7'
+        - 'github/codeql-action@v4.37.9'
     '.github/workflows/dogfood-gate.yml':
         - 'actions/checkout@v7.0.1'
     '.github/workflows/governance.yml': []
@@ -31,7 +31,7 @@ workflows:
     '.github/workflows/verify-tlaplus.yml':
         - 'actions/cache@v6.1.0'
         - 'actions/checkout@v7.0.1'
-        - 'actions/setup-java@v5.7.0'
+        - 'actions/setup-java@v6.0.0'
         - 'actions/upload-artifact@v7.0.1'
 dependencies:
     'actions/cache@v6.1.0':
@@ -49,14 +49,14 @@ dependencies:
         commit: 'sha1-45bfe0192ca1faeb007ade9deae92b16b8254a0d'
         owner_id: 44036562
         repo_id: 513659658
-    'actions/deploy-pages@v5.0.0':
-        ref: 'v5.0.0'
-        commit: 'sha1-cd2ce8fcbc39b97be8ca5fce6e763baed58fa128'
+    'actions/deploy-pages@v5.0.1':
+        ref: 'v5.0.1'
+        commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346'
         owner_id: 44036562
         repo_id: 438112499
-    'actions/setup-java@v5.7.0':
-        ref: 'v5.7.0'
-        commit: 'sha1-b6effb05e454b25005698d916606bdc6ffcbf961'
+    'actions/setup-java@v6.0.0':
+        ref: 'v6.0.0'
+        commit: 'sha1-dd06d9cba3e5552c54d9f8ea23572deb30010f7c'
         owner_id: 44036562
         repo_id: 196057608
     'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f':
@@ -76,9 +76,9 @@ dependencies:
         repo_id: 496012378
         uses:
             - 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f'
-    'github/codeql-action@v4.37.7':
-        ref: 'v4.37.7'
-        commit: 'sha1-ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd'
+    'github/codeql-action@v4.37.9':
+        ref: 'v4.37.9'
+        commit: 'sha1-cdf488f595d80d6e07e03d4674febd5ab45fa938'
         owner_id: 9919
         repo_id: 259445878
     'haskell-actions/setup@v2.12.0':
diff --git a/.github/workflows/casket-pages.yml b/.github/workflows/casket-pages.yml
index f9a7efa..cccf768 100644
--- a/.github/workflows/casket-pages.yml
+++ b/.github/workflows/casket-pages.yml
@@ -119,4 +119,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v5.0.0
+        uses: actions/deploy-pages@v5.0.1
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 6fce430..33d6631 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -40,12 +40,12 @@ jobs:
         uses: actions/checkout@v7.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.37.7
+        uses: github/codeql-action/init@v4.37.9
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4.37.7
+        uses: github/codeql-action/analyze@v4.37.9
         with:
           category: "/language:${{ matrix.language }}"
diff --git a/.github/workflows/verify-tlaplus.yml b/.github/workflows/verify-tlaplus.yml
index 9c24c4f..58f7da7 100644
--- a/.github/workflows/verify-tlaplus.yml
+++ b/.github/workflows/verify-tlaplus.yml
@@ -43,7 +43,7 @@ jobs:
         uses: actions/checkout@v7.0.1
 
       - name: Set up Eclipse Temurin 21 JRE
-        uses: actions/setup-java@v5.7.0
+        uses: actions/setup-java@v6.0.0
         with:
           distribution: temurin
           java-version: '21'