diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 3fdd4ec..887f9fa 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,3 +5,12 @@ updates:
   schedule:
     interval: weekly
   open-pull-requests-limit: 10
+
+- package-ecosystem: github-actions
+  directory: "/"
+  schedule:
+    interval: weekly
+  groups:
+    actions:
+      patterns:
+        - "*"
diff --git a/.github/workflows/pipeline.yaml b/.github/workflows/pipeline.yaml
index 2883900..6ed01ce 100644
--- a/.github/workflows/pipeline.yaml
+++ b/.github/workflows/pipeline.yaml
@@ -15,20 +15,12 @@ env:
   imageRepository: "emberstack/kubernetes-reflector"
   DOCKER_CLI_EXPERIMENTAL: "enabled"
 
-
 jobs:
   ci:
     name: CI
     runs-on: ubuntu-latest
     steps:
-
-      - name: tools - helm - install
-        uses: azure/setup-helm@v1
-
-
-
-      - name: checkout
-        uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
       - name: artifacts - prepare directories
         run: |
@@ -45,13 +37,13 @@ jobs:
         run: helm template --namespace kube-system reflector .artifacts/helm/reflector-${{env.version}}.tgz > .artifacts/kubectl/reflector-${{env.version}}.yaml
 
       - name: "artifacts - upload - helm chart"
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@v4
         with:
           name: helm
           path: .artifacts/helm
 
       - name: "artifacts - upload - kubectl manifests"
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@v4
         with:
           name: kubectl
           path: .artifacts/kubectl
@@ -68,12 +60,11 @@ jobs:
 
       - name: tools - docker - login
         if: github.event_name == 'push' && github.actor != 'dependabot[bot]'
-        uses: docker/login-action@v1
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.ES_DOCKERHUB_USERNAME }}
           password: ${{ secrets.ES_DOCKERHUB_PAT }}
 
-
       - name: "docker - build and publish"
         if: github.event_name == 'push' && github.actor != 'dependabot[bot]'
         run: |
@@ -96,23 +87,20 @@ jobs:
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     runs-on: ubuntu-latest
     steps:
-      - name: tools - helm - install
-        uses: azure/setup-helm@v1
-
       - name: tools - docker - login
-        uses: docker/login-action@v1
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.ES_DOCKERHUB_USERNAME }}
           password: ${{ secrets.ES_DOCKERHUB_PAT }}
 
       - name: artifacts - download - helm chart
-        uses: actions/download-artifact@v2
+        uses: actions/download-artifact@v4
         with:
           name: helm
           path: .artifacts/helm
 
       - name: artifacts - download - kubectl manifests
-        uses: actions/download-artifact@v2
+        uses: actions/download-artifact@v4
         with:
           name: kubectl
           path: .artifacts/kubectl
@@ -136,13 +124,12 @@ jobs:
           docker push ${{env.imageRepository}}:${{env.version}}-arm64v8
 
       - name: github - checkout - helm-charts
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           repository: emberstack/helm-charts
-          token:  ${{ secrets.ES_GITHUB_PAT }}
+          token: ${{ secrets.ES_GITHUB_PAT }}
           path: helm-charts
 
-
       - name: github - publish - chart
         run: |
           mkdir -p helm-charts/charts
@@ -161,7 +148,7 @@ jobs:
 
       - name: github - release - set manifest name
         run: |
-          mkdir -p github 
+          mkdir -p github
           cp .artifacts/kubectl/reflector-${{env.version}}.yaml github/reflector.yaml
 
       - name: github - create release
@@ -174,4 +161,3 @@ jobs:
           token: ${{ secrets.ES_GITHUB_PAT }}
           files: |
             github/reflector.yaml
-