diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 251a20e..888fbbf 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -18,7 +18,7 @@ jobs:
           - x86_64-unknown-linux-gnu
     steps:
       - name: Checkout boringtun
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           repository: cloudflare/boringtun
       - uses: dtolnay/rust-toolchain@stable
@@ -26,12 +26,12 @@ jobs:
         run: cargo install cross --git https://github.com/cross-rs/cross
       - name: install binary
         run: cross build --target ${{ matrix.target }} --release  --bin boringtun-cli
-      - uses: actions/upload-artifact@v2
+      - uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.target }}
           path: target/${{ matrix.target }}/release/boringtun-cli
       - id: sha
-        run: echo "::set-output name=sha::$(git describe --always --tags --dirty)"
+        run:  echo "sha=$(git describe --always --tags --dirty)" >> $GITHUB_OUTPUT
     outputs:
       sha: ${{ steps.sha.outputs.sha }}
   push:
@@ -40,32 +40,32 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
-      - uses: actions/download-artifact@v2
+        uses: actions/checkout@v4
+      - uses: actions/download-artifact@v4
         with:
           name: aarch64-unknown-linux-gnu
           path: linux/arm64/
-      - uses: actions/download-artifact@v2
+      - uses: actions/download-artifact@v4
         with:
           name: armv7-unknown-linux-gnueabihf
           path: linux/arm/v7/
-      - uses: actions/download-artifact@v2
+      - uses: actions/download-artifact@v4
         with:
           name: x86_64-unknown-linux-gnu
           path: linux/amd64/
-      - uses: docker/login-action@v1
+      - uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USER}}
           password: ${{ secrets.DOCKER_PASSWORD }}
-      - uses: docker/login-action@v1
+      - uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v1
-      - uses: docker/build-push-action@v2
+        uses: docker/setup-buildx-action@v3
+      - uses: docker/build-push-action@v5
         with:
           context: .
           file: ./Dockerfile
diff --git a/.github/workflows/build_alpine.yaml b/.github/workflows/build_alpine.yaml
index a6e19d7..18a2a2b 100644
--- a/.github/workflows/build_alpine.yaml
+++ b/.github/workflows/build_alpine.yaml
@@ -18,7 +18,7 @@ jobs:
           - x86_64-unknown-linux-musl
     steps:
       - name: Checkout boringtun
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           repository: cloudflare/boringtun
       - uses: dtolnay/rust-toolchain@stable
@@ -26,12 +26,12 @@ jobs:
         run: cargo install cross --git https://github.com/cross-rs/cross
       - name: install binary
         run: cross build --target ${{ matrix.target }} --release  --bin boringtun-cli
-      - uses: actions/upload-artifact@v2
+      - uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.target }}
           path: target/${{ matrix.target }}/release/boringtun-cli
       - id: sha
-        run: echo "::set-output name=sha::$(git describe --always --tags --dirty)"
+        run:  echo "sha=$(git describe --always --tags --dirty)" >> $GITHUB_OUTPUT
     outputs:
       sha: ${{ steps.sha.outputs.sha }}
   push:
@@ -40,32 +40,32 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
-      - uses: actions/download-artifact@v2
+        uses: actions/checkout@v4
+      - uses: actions/download-artifact@v4
         with:
           name: aarch64-unknown-linux-musl
           path: linux/arm64/
-      - uses: actions/download-artifact@v2
+      - uses: actions/download-artifact@v4
         with:
           name: armv7-unknown-linux-musleabihf
           path: linux/arm/v7/
-      - uses: actions/download-artifact@v2
+      - uses: actions/download-artifact@v4
         with:
           name: x86_64-unknown-linux-musl
           path: linux/amd64/
-      - uses: docker/login-action@v1
+      - uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USER}}
           password: ${{ secrets.DOCKER_PASSWORD }}
-      - uses: docker/login-action@v1
+      - uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v1
-      - uses: docker/build-push-action@v2
+        uses: docker/setup-buildx-action@v3
+      - uses: docker/build-push-action@v5
         with:
           context: .
           platforms: linux/arm64, linux/arm, linux/amd64