diff --git a/.github/workflows/check-cves.yml b/.github/workflows/check-cves.yml
index 6079283c3c7..011e96d8eeb 100644
--- a/.github/workflows/check-cves.yml
+++ b/.github/workflows/check-cves.yml
@@ -10,7 +10,7 @@ jobs:
 
     steps:
     - name: Check out codebase
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - name: Scan current project
       id: scan
diff --git a/.github/workflows/create-bosh-lite.yml b/.github/workflows/create-bosh-lite.yml
index cd28908c061..b0a5087388a 100644
--- a/.github/workflows/create-bosh-lite.yml
+++ b/.github/workflows/create-bosh-lite.yml
@@ -46,13 +46,13 @@ jobs:
           sudo apt install -y build-essential unzip wamerican
 
       - name: Checkout bosh-bootloader
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: cloudfoundry/bosh-bootloader
           path: bosh-bootloader
 
       - name: Checkout cli
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           path: cli
 
@@ -84,12 +84,12 @@ jobs:
           bbl up
 
       - name: Authenticate to Google Cloud
-        uses: google-github-actions/auth@v2
+        uses: google-github-actions/auth@v3
         with:
           credentials_json: ${{ secrets.GCP_CREDENTIALS_JSON }}
 
       - name: Setup gcloud CLI
-        uses: google-github-actions/setup-gcloud@v2
+        uses: google-github-actions/setup-gcloud@v3
 
       - name: Save bbl state
         run: |
@@ -97,14 +97,14 @@ jobs:
           gsutil -m cp -R -P ./$env_name gs://cf-cli-bosh-lites/
 
       - name: Checkout cf-deployment
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: cloudfoundry/cf-deployment
           ref: release-candidate
           path: cf-deployment
 
       - name: Checkout bosh-deployment
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: cloudfoundry/bosh-deployment
           path: bosh-deployment
diff --git a/.github/workflows/delete-bosh-lite.yml b/.github/workflows/delete-bosh-lite.yml
index b67c4ce0ec6..d22345fd203 100644
--- a/.github/workflows/delete-bosh-lite.yml
+++ b/.github/workflows/delete-bosh-lite.yml
@@ -46,23 +46,23 @@ jobs:
           sudo apt install -y build-essential unzip wamerican
 
       - name: Checkout cli
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           path: cli
 
       - name: Checkout bosh-bootloader
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: cloudfoundry/bosh-bootloader
           path: bosh-bootloader
 
       - name: Authenticate to Google Cloud
-        uses: google-github-actions/auth@v2
+        uses: google-github-actions/auth@v3
         with:
           credentials_json: ${{ secrets.GCP_CREDENTIALS_JSON }}
 
       - name: Setup gcloud CLI
-        uses: google-github-actions/setup-gcloud@v2
+        uses: google-github-actions/setup-gcloud@v3
 
       - name: Download file from GCS
         run: |
diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index e1e425a5f0f..8e5ab5c90d3 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -25,11 +25,11 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: '0'
       - name: Set up Go 1.x
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
           check-latest: true
@@ -43,11 +43,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         fetch-depth: '0'
     - name: Set Up Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version-file: go.mod
         check-latest: true
diff --git a/.github/workflows/release-build-sign-upload.yml b/.github/workflows/release-build-sign-upload.yml
index eed6639388e..7ecbb78baf3 100644
--- a/.github/workflows/release-build-sign-upload.yml
+++ b/.github/workflows/release-build-sign-upload.yml
@@ -71,7 +71,7 @@ jobs:
 
     steps:
     - name: Checkout cli
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       
     - name: Bump version
       id: bump-version
@@ -127,10 +127,10 @@ jobs:
       run: echo "VERSION_BUILD $VERSION_BUILD"
 
     - name: Checkout cli
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - name: Checkout cli-ci
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         repository: cloudfoundry/cli-ci.git
         path: cli-ci
@@ -139,7 +139,7 @@ jobs:
     - name: Install Linux Packages
       run: sudo apt update && sudo apt install -y --no-install-recommends fakeroot
     - name: Set up Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version-file: go.mod
 
@@ -396,17 +396,17 @@ jobs:
       run: echo "VERSION_BUILD $VERSION_BUILD"
 
     - name: Checkout cli
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - name: Checkout cli-ci
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         repository: cloudfoundry/cli-ci.git
         path: cli-ci
         ref: main
 
     - name: Checkout bomutils
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         repository: hogliux/bomutils.git
         ref: 0.2
@@ -417,7 +417,7 @@ jobs:
       run: make
 
     - name: Set up Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version-file: go.mod
 
@@ -624,11 +624,11 @@ jobs:
       VERSION_MAJOR: ${{ needs.setup.outputs.version-major }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
 
@@ -767,7 +767,7 @@ jobs:
     steps:
 
     - name: Checkout cli
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - name: Download signed artifacts
       uses: actions/download-artifact@v5
@@ -863,7 +863,7 @@ jobs:
         path: signed/*          
 
     - name: Setup aws to upload installers to CLAW S3 bucket
-      uses: aws-actions/configure-aws-credentials@v4
+      uses: aws-actions/configure-aws-credentials@v5
       with:
         aws-access-key-id:     ${{ vars.AWS_ACCESS_KEY_ID }}
         aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY  }}
@@ -1014,7 +1014,7 @@ jobs:
         path: ${{ env.ARTIFACTS_DIR }}
 
     - name: Checkout CLI
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         path: ${{ env.REPO_DIR }}
        
@@ -1054,7 +1054,7 @@ jobs:
       VERSION_BUILD: ${{ needs.setup.outputs.version-build }}
     steps:
     - name: Checkout CLAW
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         repository: cloudfoundry/CLAW
         ref: master
diff --git a/.github/workflows/release-update-repos.yml b/.github/workflows/release-update-repos.yml
index 978c62b179a..6d5a1ed6417 100644
--- a/.github/workflows/release-update-repos.yml
+++ b/.github/workflows/release-update-repos.yml
@@ -30,7 +30,7 @@ jobs:
       run: echo "claw-url=https://packages.cloudfoundry.org" >> "${GITHUB_OUTPUT}"
 
     - name: Checkout cli
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - name: Parse semver
       id: parse-semver
@@ -71,14 +71,14 @@ jobs:
     steps:
 
     - name: Checkout cli-ci
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         repository: cloudfoundry/cli-ci.git
         ref: main
         path: cli-ci
 
     - name: Checkout homebrew-tap
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         repository: cloudfoundry/homebrew-tap
         ref: master
@@ -246,7 +246,7 @@ jobs:
         echo "VERSION_BUILD: ${VERSION_BUILD}"
 
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - uses: ruby/setup-ruby@v1
       with:
@@ -402,7 +402,7 @@ jobs:
         && pip3 install awscli
 
     - name: Setup aws to upload installers to CLAW S3 bucket
-      uses: aws-actions/configure-aws-credentials@v4
+      uses: aws-actions/configure-aws-credentials@v5
       with:
         aws-access-key-id:     ${{ vars.AWS_ACCESS_KEY_ID }}
         aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
@@ -484,7 +484,7 @@ jobs:
           echo "VERSION_BUILD: ${VERSION_BUILD}"
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Calculate Checksums
         run: |
@@ -585,7 +585,7 @@ jobs:
         echo "Environment: ${ENVIRONMENT}"
     
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         repository: cloudfoundry/cli
         ref: ${{ github.ref_name }}
diff --git a/.github/workflows/tests-integration-reusable.yml b/.github/workflows/tests-integration-reusable.yml
index 04916aceabe..5b0d85cbf9f 100644
--- a/.github/workflows/tests-integration-reusable.yml
+++ b/.github/workflows/tests-integration-reusable.yml
@@ -32,20 +32,20 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout cli
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{inputs.gitRef}}
         fetch-depth: 0
         path: cli
 
     - name: Checkout CF deployment tasks
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         repository: cloudfoundry/cf-deployment-concourse-tasks
         path: cf-deployment-concourse-tasks
 
     - name: Set Up Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version-file: cli/go.mod
         check-latest: true
@@ -73,12 +73,12 @@ jobs:
         sudo apt-get install -y build-essential unzip
 
     - name: Authenticate to Google Cloud
-      uses: google-github-actions/auth@v2
+      uses: google-github-actions/auth@v3
       with:
         credentials_json: ${{ secrets.GCP_CREDENTIALS_JSON }}
 
     - name: Setup gcloud CLI
-      uses: google-github-actions/setup-gcloud@v2
+      uses: google-github-actions/setup-gcloud@v3
 
     - name: Download file from GCS
       run: |
diff --git a/.github/workflows/tests-integration.yml b/.github/workflows/tests-integration.yml
index 0d1337c174c..02d28926437 100644
--- a/.github/workflows/tests-integration.yml
+++ b/.github/workflows/tests-integration.yml
@@ -56,12 +56,12 @@ jobs:
       - get-sha
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{needs.get-sha.outputs.gitRef}}
           fetch-depth: 0
       - name: Set Up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
           check-latest: true
diff --git a/.github/workflows/tests-unit.yml b/.github/workflows/tests-unit.yml
index 18e49165887..10dbf493eb7 100644
--- a/.github/workflows/tests-unit.yml
+++ b/.github/workflows/tests-unit.yml
@@ -45,10 +45,10 @@ jobs:
 
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - name: Setup Go Environment
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version-file: go.mod
         check-latest: true
diff --git a/.github/workflows/util-code-quality.yml b/.github/workflows/util-code-quality.yml
index 5cde50693d0..b18b7ee5f47 100644
--- a/.github/workflows/util-code-quality.yml
+++ b/.github/workflows/util-code-quality.yml
@@ -22,7 +22,7 @@ jobs:
     steps:
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3