diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index fe0ccda7..bebca8f9 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -38,7 +38,7 @@ jobs:
     name: actionlint with reviewdog
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: actionlint
         uses: reviewdog/action-actionlint@v1
         with:
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2df8c9fe..0441529c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -7,14 +7,14 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.pusher.name != 'dreamkast-cloudnativedays'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v2
+        uses: aws-actions/configure-aws-credentials@v4
         with:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
@@ -22,11 +22,11 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v1
+        uses: aws-actions/amazon-ecr-login@v2
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@v5
         with:
           images: ${{ steps.login-ecr.outputs.registry }}/dreamkast-ui
           tags: |
@@ -37,7 +37,7 @@ jobs:
 
       - name: Build
         id: docker_build
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           context: ./
           file: ./Dockerfile
diff --git a/.github/workflows/cron-remove-label.yml b/.github/workflows/cron-remove-label.yml
index 4125f9c3..47ce65d1 100644
--- a/.github/workflows/cron-remove-label.yml
+++ b/.github/workflows/cron-remove-label.yml
@@ -9,7 +9,7 @@ jobs:
   labeling:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@v6
+      - uses: actions/github-script@v7
         with:
           script: |
             const targetLabel = 'reviewapps';
diff --git a/.github/workflows/eslint.yml b/.github/workflows/eslint.yml
index dc9f3eac..c445d298 100644
--- a/.github/workflows/eslint.yml
+++ b/.github/workflows/eslint.yml
@@ -12,9 +12,9 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.pusher.name != 'dreamkast-cloudnativedays'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Set up Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version-file: '.node-version'
           cache: 'yarn'
diff --git a/.github/workflows/gitops-prd.yml b/.github/workflows/gitops-prd.yml
index b9f0d851..748a7fa6 100644
--- a/.github/workflows/gitops-prd.yml
+++ b/.github/workflows/gitops-prd.yml
@@ -10,17 +10,17 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Generate token
         id: generate_token
-        uses: tibdex/github-app-token@v1
+        uses: tibdex/github-app-token@v2
         with:
           app_id: ${{ secrets.APP_ID }}
           private_key: ${{ secrets.PRIVATE_KEY }}
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v2
+        uses: aws-actions/configure-aws-credentials@v4
         with:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
@@ -28,10 +28,10 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v1
+        uses: aws-actions/amazon-ecr-login@v2
 
       - name: Checkout dreamkast-infra
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: cloudnativedaysjp/dreamkast-infra
           path: dreamkast-infra
@@ -60,7 +60,7 @@ jobs:
           branch: production/ui-main
 
       - name: Create and Merge Pull Request
-        uses: "actions/github-script@v6"
+        uses: "actions/github-script@v7"
         with:
           github-token: ${{ steps.generate_token.outputs.token }}
           script: |
diff --git a/.github/workflows/gitops-stg.yml b/.github/workflows/gitops-stg.yml
index bb42a6ee..d84b6858 100644
--- a/.github/workflows/gitops-stg.yml
+++ b/.github/workflows/gitops-stg.yml
@@ -10,17 +10,17 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Generate token
         id: generate_token
-        uses: tibdex/github-app-token@v1
+        uses: tibdex/github-app-token@v2
         with:
           app_id: ${{ secrets.APP_ID }}
           private_key: ${{ secrets.PRIVATE_KEY }}
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v2
+        uses: aws-actions/configure-aws-credentials@v4
         with:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
@@ -28,10 +28,10 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v1
+        uses: aws-actions/amazon-ecr-login@v2
 
       - name: Checkout dreamkast-infra
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: cloudnativedaysjp/dreamkast-infra
           path: dreamkast-infra
@@ -60,7 +60,7 @@ jobs:
           branch: staging/ui-main
 
       - name: Create and Merge Pull Request
-        uses: "actions/github-script@v6"
+        uses: "actions/github-script@v7"
         with:
           github-token: ${{ steps.generate_token.outputs.token }}
           script: |
diff --git a/.github/workflows/jest.yml b/.github/workflows/jest.yml
index de08e1a0..747abac9 100644
--- a/.github/workflows/jest.yml
+++ b/.github/workflows/jest.yml
@@ -12,9 +12,9 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.pusher.name != 'dreamkast-cloudnativedays'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Set up Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version-file: '.node-version'
           cache: 'yarn'
diff --git a/.github/workflows/push-tag-by-releasebot.yml b/.github/workflows/push-tag-by-releasebot.yml
index 5d01c9db..ba0ed31e 100644
--- a/.github/workflows/push-tag-by-releasebot.yml
+++ b/.github/workflows/push-tag-by-releasebot.yml
@@ -11,12 +11,12 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: tibdex/github-app-token@v1
+        uses: tibdex/github-app-token@v2
         with:
           app_id: ${{ secrets.APP_ID }}
           private_key: ${{ secrets.PRIVATE_KEY }}
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           token: ${{ steps.generate_token.outputs.token }}
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3e242664..89e30282 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,8 +10,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           generate_release_notes: true
diff --git a/.github/workflows/reviewapp.yml b/.github/workflows/reviewapp.yml
index 21f3e00b..bd461d7f 100644
--- a/.github/workflows/reviewapp.yml
+++ b/.github/workflows/reviewapp.yml
@@ -8,17 +8,17 @@ jobs:
     name: grant 'reviewapps' label
     if: ${{ ! startsWith(github.head_ref, 'renovate/') }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: '3.10'
           architecture: 'x64'
 
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@v36
+        uses: tj-actions/changed-files@v43
         with:
           use_fork_point: true
 
@@ -46,7 +46,7 @@ jobs:
           echo "::set-output name=FLAG::${FLAG}"
 
       - name: Labeling 'reviewapps' to PR
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         id: set-result
         if: ${{ steps.check-paths-ignore.outputs.FLAG == 'false' }}
         with: