diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index b244d75..c95eced 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v4
 
       - name: Install system dependencies
         run: |
@@ -22,11 +22,11 @@ jobs:
         run: python3 -m twine check dist/*
 
   lint:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/checkout@v1
-      - uses: actions/setup-python@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: 3.6
 
@@ -40,11 +40,11 @@ jobs:
         run: black --line-length 79 --check canonicalwebteam tests
 
   test:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/checkout@v1
-      - uses: actions/setup-python@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: 3.6
 
@@ -59,7 +59,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Check inclusive naming
         uses: canonical-web-and-design/inclusive-naming@main
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 5e33654..ac53be0 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
       - name: Install system dependencies
         run: |
diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index 3a1b6cf..af731ef 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -11,7 +11,7 @@ jobs:
     outputs:
       version: ${{ steps.get_version.outputs.version }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - id: get_version
         run: echo "##[set-output name=version;]"$(grep '^[[:blank:]]*version' setup.py | cut -d'"' -f 2)
 
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Drafts your next Release notes as Pull Requests are merged into "main"
-      - uses: release-drafter/release-drafter@v5
+      - uses: release-drafter/release-drafter@v6
         with:
           tag: "${{ needs.get_version.outputs.version }}"
           version: "${{ needs.get_version.outputs.version }}"
diff --git a/setup.py b/setup.py
index de1b7b0..66e78ac 100755
--- a/setup.py
+++ b/setup.py
@@ -22,14 +22,14 @@
     packages=find_packages(),
     install_requires=[
         "canonicalwebteam.yaml-responses[flask] (>=1,<2)",
-        "flask==1.1.2",
+        "flask==3.0.2",
         "jinja2 (>=3,<3.1.0)",
-        "gevent==21.12.0",
-        "greenlet==1.1.2",
+        "gevent==23.9.1",
+        "greenlet==3.0.3",
         "talisker[gunicorn,gevent,flask,prometheus,raven]",
         "Werkzeug (>=1.0.0, <1.2)",
         "markupsafe >= 1.0, < 2.1.0",
-        "itsdangerous >= 0.24, < 2.0",
+        "itsdangerous >=2.1, <2.2",
     ],
     dependency_links=[],
     include_package_data=True,