diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1ea9d8b..97bbfb9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -94,7 +94,7 @@ jobs:
           exit-code: '0'
       - name: Upload Trivy results to the Security tab
         if: always()
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: trivy-results.sarif
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c4aa0d8..d522835 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -26,7 +26,7 @@ jobs:
           java-version: '21'
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: java-kotlin
           # 'security-and-quality' is broader than the default 'security-extended'.
@@ -39,6 +39,6 @@ jobs:
         run: ./gradlew compileJava compileTestJava --no-daemon
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
         with:
           category: "/language:java-kotlin"