diff --git a/.github/workflows/auto-assign.yml b/.github/workflows/auto-assign.yml
index 35fff44ce..7dbaf7c0b 100644
--- a/.github/workflows/auto-assign.yml
+++ b/.github/workflows/auto-assign.yml
@@ -9,7 +9,7 @@ jobs:
         runs-on: trailheadapps-Ubuntu
         steps:
             - name: 'Auto-assign issue'
-              uses: pozil/auto-assign-issue@v1
+              uses: pozil/auto-assign-issue@v2
               with:
                   repo-token: ${{ secrets.GITHUB_TOKEN }}
                   assignees: ${{ vars.DEFAULT_ISSUE_ASSIGNEE }}
diff --git a/.github/workflows/ci-pr.yml b/.github/workflows/ci-pr.yml
index 071137407..1178ce37d 100644
--- a/.github/workflows/ci-pr.yml
+++ b/.github/workflows/ci-pr.yml
@@ -35,7 +35,7 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4
 
             # Install Volta to enforce proper node and package manager versions
             - name: 'Install Volta'
@@ -44,7 +44,7 @@ jobs:
             # Cache node_modules to speed up the process
             - name: 'Restore node_modules cache'
               id: cache-npm
-              uses: actions/cache@v3
+              uses: actions/cache@v4
               with:
                   path: node_modules
                   key: npm-${{ hashFiles('**/package-lock.json') }}
@@ -71,8 +71,9 @@ jobs:
 
             # Upload code coverage data
             - name: 'Upload code coverage for LWC to Codecov.io'
-              uses: codecov/codecov-action@v3
+              uses: codecov/codecov-action@v4
               with:
+                  token: ${{ secrets.CODECOV_TOKEN }}
                   flags: LWC
 
     # Auto merge Dependabot PRs for:
@@ -89,7 +90,7 @@ jobs:
         steps:
             - name: 'Fetch Dependabot metadata'
               id: dependabot
-              uses: dependabot/fetch-metadata@v1
+              uses: dependabot/fetch-metadata@v2
 
             - name: 'Check auto merge conditions'
               id: auto-merge
@@ -119,11 +120,11 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4
 
             # Run PMD scan
             - name: 'Run PMD scan'
-              uses: pmd/pmd-github-action@v1.4.0
+              uses: pmd/pmd-github-action@v2.0.0
               id: pmd
               with:
                   version: '6.55.0'
@@ -190,8 +191,9 @@ jobs:
 
             # Upload code coverage data
             - name: 'Upload code coverage for Apex to Codecov.io'
-              uses: codecov/codecov-action@v3
+              uses: codecov/codecov-action@v4
               with:
+                  token: ${{ secrets.CODECOV_TOKEN }}
                   flags: Apex
 
             # Housekeeping
@@ -205,7 +207,7 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4
 
             # Check for package changes using git diff
             - name: 'Check for package changes'
@@ -222,7 +224,7 @@ jobs:
 
             # Trigger packaging PR workflow
             - name: 'Trigger packaging PR workflow if needed'
-              uses: peter-evans/repository-dispatch@v2
+              uses: peter-evans/repository-dispatch@v3
               if: steps.checkForChanges.outputs.hasChanges == 'true'
               with:
                   token: ${{ secrets.BOT_ACCESS_TOKEN }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 316682069..e8cefec67 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4
 
             # Install Volta to enforce proper node and package manager versions
             - name: 'Install Volta'
@@ -27,7 +27,7 @@ jobs:
             # Cache node_modules to speed up the process
             - name: 'Restore node_modules cache'
               id: cache-npm
-              uses: actions/cache@v3
+              uses: actions/cache@v4
               with:
                   path: node_modules
                   key: npm-${{ hashFiles('**/package-lock.json') }}
@@ -54,8 +54,9 @@ jobs:
 
             # Upload code coverage data
             - name: 'Upload code coverage for LWC to Codecov.io'
-              uses: codecov/codecov-action@v3
+              uses: codecov/codecov-action@v4
               with:
+                  token: ${{ secrets.CODECOV_TOKEN }}
                   flags: LWC
 
     scratch-org-test:
@@ -65,11 +66,11 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4
 
             # Run PMD scan
             - name: 'Run PMD scan'
-              uses: pmd/pmd-github-action@v1.4.0
+              uses: pmd/pmd-github-action@v2.0.0
               id: pmd
               with:
                   version: '6.55.0'
@@ -126,8 +127,9 @@ jobs:
 
             # Upload code coverage data
             - name: 'Upload code coverage for Apex to Codecov.io'
-              uses: codecov/codecov-action@v3
+              uses: codecov/codecov-action@v4
               with:
+                  token: ${{ secrets.CODECOV_TOKEN }}
                   flags: Apex
 
             # Housekeeping
@@ -141,7 +143,7 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4
 
             # Check for package changes using git diff
             - name: 'Check for package changes'
@@ -158,7 +160,7 @@ jobs:
 
             # Trigger packaging workflow if needed
             - name: 'Trigger packaging workflow if needed'
-              uses: peter-evans/repository-dispatch@v2
+              uses: peter-evans/repository-dispatch@v3
               if: steps.checkForChanges.outputs.hasChanges == 'true'
               with:
                   token: ${{ secrets.BOT_ACCESS_TOKEN }}
diff --git a/.github/workflows/codetour-watch.yml b/.github/workflows/codetour-watch.yml
index bab2c1a5b..84addf189 100644
--- a/.github/workflows/codetour-watch.yml
+++ b/.github/workflows/codetour-watch.yml
@@ -10,10 +10,10 @@ jobs:
         if: github.actor != 'trailheadapps-bot' && github.actor != 'dependabot[bot]'
         steps:
             - name: 'Checkout source code'
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4
 
             - name: 'Watch CodeTour changes'
-              uses: pozil/codetour-watch@v2.0.0
+              uses: pozil/codetour-watch@v3.0.0
 
     skip-codetour-watch:
         if: github.actor == 'trailheadapps-bot' || github.actor == 'dependabot[bot]'
diff --git a/.github/workflows/packaging-pr.yml b/.github/workflows/packaging-pr.yml
index f027853a1..8d74d1101 100644
--- a/.github/workflows/packaging-pr.yml
+++ b/.github/workflows/packaging-pr.yml
@@ -26,7 +26,7 @@ jobs:
 
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4
 
             # Store secret for dev hub
             - name: 'Populate auth file with DEVHUB_SFDX_URL secret'
diff --git a/.github/workflows/packaging.yml b/.github/workflows/packaging.yml
index 0282bcebf..41c39b394 100644
--- a/.github/workflows/packaging.yml
+++ b/.github/workflows/packaging.yml
@@ -21,7 +21,7 @@ jobs:
 
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4
               with:
                   ref: ${{ github.event.client_payload.ref }}
 
@@ -83,7 +83,7 @@ jobs:
             # Create PR for new package version
             - name: 'Create PR for new package version'
               id: create-pr
-              uses: peter-evans/create-pull-request@v4
+              uses: peter-evans/create-pull-request@v6
               with:
                   title: 'Released new package version ${{ steps.createPackageVersion.outputs.packageVersionId }}'
                   body: 'Released new package version ${{ steps.createPackageVersion.outputs.packageVersionId }}'
diff --git a/package.json b/package.json
index 6d3eb30a1..2205fe637 100644
--- a/package.json
+++ b/package.json
@@ -50,6 +50,6 @@
         "prettier-plugin-apex": "^2.1.3"
     },
     "volta": {
-        "node": "18.17.0"
+        "node": "20.13.1"
     }
 }