diff --git a/.github/workflows/_android.yml b/.github/workflows/_android.yml
index 7b67c340350..a6d4c92e74c 100644
--- a/.github/workflows/_android.yml
+++ b/.github/workflows/_android.yml
@@ -64,7 +64,7 @@ jobs:
           instructions: |
             This is used to run Android emulators, ANDROID_HOME is installed at /opt/android/sdk
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
         with:
           submodules: false
 
@@ -99,7 +99,7 @@ jobs:
         uses: gradle/actions/setup-gradle@v3
 
       - name: AVD cache
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         id: avd-cache
         with:
           path: |
diff --git a/.github/workflows/add-unanswered-to-project.yml b/.github/workflows/add-unanswered-to-project.yml
index 5321d0f75e2..dd32253fa53 100644
--- a/.github/workflows/add-unanswered-to-project.yml
+++ b/.github/workflows/add-unanswered-to-project.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Add open issues and open, non-draft PRs to org project (excluding certain authors)
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.ET_EXT_CONTRIB }}
           script: |
diff --git a/.github/workflows/apple.yml b/.github/workflows/apple.yml
index 789af84c1d1..be18e5d1804 100644
--- a/.github/workflows/apple.yml
+++ b/.github/workflows/apple.yml
@@ -97,7 +97,7 @@ jobs:
     runs-on: linux.2xlarge
     steps:
       - name: Download the artifacts from GitHub
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           # The name here needs to match the name of the upload-artifact parameter
           name: ios-demo-app
@@ -203,11 +203,11 @@ jobs:
       id-token: write
       contents: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
           token: ${{ secrets.GH_PYTORCHBOT_CHERRY_PICK_TOKEN || secrets.GITHUB_TOKEN }}
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.11'
           cache: pip
@@ -217,7 +217,7 @@ jobs:
           role-to-assume: arn:aws:iam::308535385114:role/gha_executorch_upload-frameworks-ios
           aws-region: us-east-1
       - name: Download the artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           # NB: The name here needs to match the upload-artifact name from build-frameworks-ios job
           name: executorch-frameworks-ios
diff --git a/.github/workflows/check-c10-sync.yml b/.github/workflows/check-c10-sync.yml
index dae442acc5b..2412c5f6bc0 100644
--- a/.github/workflows/check-c10-sync.yml
+++ b/.github/workflows/check-c10-sync.yml
@@ -19,7 +19,7 @@ jobs:
     name: check-c10-sync
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Clone PyTorch
diff --git a/.github/workflows/check-labels.yml b/.github/workflows/check-labels.yml
index 65da3052155..226492a6d19 100644
--- a/.github/workflows/check-labels.yml
+++ b/.github/workflows/check-labels.yml
@@ -37,10 +37,10 @@ jobs:
     if: github.repository_owner == 'pytorch'
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.10'
       # Not the direct dependencies but the script uses trymerge
diff --git a/.github/workflows/cherry-pick.yml b/.github/workflows/cherry-pick.yml
index b33c0a0ca49..37d507b6ab5 100644
--- a/.github/workflows/cherry-pick.yml
+++ b/.github/workflows/cherry-pick.yml
@@ -14,14 +14,14 @@ jobs:
     steps:
       - name: Checkout repo
         id: checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           submodules: true
           token: ${{ secrets.GH_PYTORCHBOT_CHERRY_PICK_TOKEN }}
 
       - name: Setup Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v6
         with:
           python-version: '3.10'
           cache: pip
diff --git a/.github/workflows/cuda-perf.yml b/.github/workflows/cuda-perf.yml
index 71e3adf5abc..dec44073a19 100644
--- a/.github/workflows/cuda-perf.yml
+++ b/.github/workflows/cuda-perf.yml
@@ -50,10 +50,10 @@ jobs:
     outputs:
       benchmark_configs: ${{ steps.set-parameters.outputs.benchmark_configs }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
         with:
           submodules: 'false'
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.10'
       - name: Set parameters
@@ -341,17 +341,17 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
         with:
           submodules: false
 
       - name: Setup Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v6
         with:
           python-version: '3.10'
 
       - name: Download all benchmark results
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           pattern: results-*
           path: all_results/
diff --git a/.github/workflows/docker-builds.yml b/.github/workflows/docker-builds.yml
index bfe0d5d752d..69b9e6bad78 100644
--- a/.github/workflows/docker-builds.yml
+++ b/.github/workflows/docker-builds.yml
@@ -63,7 +63,7 @@ jobs:
           github-secret: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Checkout Executorch
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
 
       - name: Setup Linux
         uses: pytorch/test-infra/.github/actions/setup-linux@main
diff --git a/.github/workflows/ghstack_land.yml b/.github/workflows/ghstack_land.yml
index 09bd2a7ced4..1011b55ec1c 100644
--- a/.github/workflows/ghstack_land.yml
+++ b/.github/workflows/ghstack_land.yml
@@ -11,10 +11,10 @@ jobs:
     runs-on: ubuntu-22.04
     environment: cherry-pick-bot
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v6
       with:
         fetch-depth: '0'
-    - uses: actions/setup-python@v4
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.10'
     - name: Try to merge PR to main
diff --git a/.github/workflows/pending_user_response.yml b/.github/workflows/pending_user_response.yml
index 4c431c7d5cb..6ee7bf9bdbd 100644
--- a/.github/workflows/pending_user_response.yml
+++ b/.github/workflows/pending_user_response.yml
@@ -10,10 +10,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.11'
 
diff --git a/.github/workflows/periodic.yml b/.github/workflows/periodic.yml
index 01bff087124..2fd386b5c00 100644
--- a/.github/workflows/periodic.yml
+++ b/.github/workflows/periodic.yml
@@ -26,10 +26,10 @@ jobs:
     outputs:
       models: ${{ steps.gather-models.outputs.models }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
         with:
           submodules: 'false'
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.10'
       - name: Extract the list of models to test
diff --git a/.github/workflows/trunk.yml b/.github/workflows/trunk.yml
index 13c69041e21..57e3a325986 100644
--- a/.github/workflows/trunk.yml
+++ b/.github/workflows/trunk.yml
@@ -1019,7 +1019,7 @@ jobs:
     outputs:
       qnn: ${{ steps.filter.outputs.qnn }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: dorny/paths-filter@v3
         id: filter
         with: