diff --git a/.github/workflows/externalLint.yml b/.github/workflows/externalLint.yml
index 7ec3d892..7dcc444b 100644
--- a/.github/workflows/externalLint.yml
+++ b/.github/workflows/externalLint.yml
@@ -35,7 +35,7 @@ jobs:
     name: ${{ inputs.command }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
           node-version: ${{ inputs.nodeVersion }}
       - run: git clone ${{ inputs.externalProjectGitUrl}} $(pwd)
diff --git a/.github/workflows/failureNotifications.yml b/.github/workflows/failureNotifications.yml
index 796eb46e..4bf463ce 100644
--- a/.github/workflows/failureNotifications.yml
+++ b/.github/workflows/failureNotifications.yml
@@ -2,7 +2,6 @@ name: failureNotifications
 on:
   workflow_run:
     workflows:
-      - version, tag and github release
       - publish
       - create-github-release
     types:
@@ -14,7 +13,7 @@ jobs:
     steps:
       - name: Announce Failure
         id: slack
-        uses: slackapi/slack-github-action@v1.21.0
+        uses: slackapi/slack-github-action@v1.24.0
         env:
           # for non-CLI-team-owned plugins, you can send this anywhere you like
           SLACK_WEBHOOK_URL: ${{ secrets.CLI_ALERTS_SLACK_WEBHOOK }}
diff --git a/.github/workflows/onRelease.yml b/.github/workflows/onRelease.yml
index 7f1237e1..588957c3 100644
--- a/.github/workflows/onRelease.yml
+++ b/.github/workflows/onRelease.yml
@@ -16,7 +16,7 @@ jobs:
       tag: ${{ steps.distTag.outputs.tag }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: ${{ github.event.release.tag_name || inputs.tag  }}
       - uses: salesforcecli/github-workflows/.github/actions/getPreReleaseTag@main