diff --git a/.github/workflows/aggregate-ci.yml b/.github/workflows/aggregate-ci.yml
index f43bfdc1c..aa265829a 100644
--- a/.github/workflows/aggregate-ci.yml
+++ b/.github/workflows/aggregate-ci.yml
@@ -19,9 +19,9 @@ jobs:
       run:
         working-directory: data-serving/scripts/aggregate-covid19/aggregate
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up Python 3.9
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: 3.9
     - name: Lint with flake8
diff --git a/.github/workflows/aggregate-deploy.yml b/.github/workflows/aggregate-deploy.yml
index 53c683513..92a893f40 100644
--- a/.github/workflows/aggregate-deploy.yml
+++ b/.github/workflows/aggregate-deploy.yml
@@ -13,7 +13,7 @@ jobs:
   deploy:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Configure AWS credentials
       uses: aws-actions/configure-aws-credentials@v1
       with:
diff --git a/.github/workflows/api-python-tests.yml b/.github/workflows/api-python-tests.yml
index 488258927..a0e966f3c 100644
--- a/.github/workflows/api-python-tests.yml
+++ b/.github/workflows/api-python-tests.yml
@@ -19,9 +19,9 @@ jobs:
       run:
         working-directory: api/python
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up Python 3.9
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: 3.9
     - name: Install dependencies
diff --git a/.github/workflows/completeness.yml b/.github/workflows/completeness.yml
index 0a480b128..051ddb099 100644
--- a/.github/workflows/completeness.yml
+++ b/.github/workflows/completeness.yml
@@ -11,7 +11,7 @@ jobs:
       run:
         working-directory: ingestion/monitoring
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Configure AWS credentials
       uses: aws-actions/configure-aws-credentials@v1
       with:
@@ -19,7 +19,7 @@ jobs:
         aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
         aws-region: eu-central-1
     - name: Set up Python 3.9
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: 3.9
     - name: Install dependencies
diff --git a/.github/workflows/curator-api-node.yml b/.github/workflows/curator-api-node.yml
index 134987721..599c86122 100644
--- a/.github/workflows/curator-api-node.yml
+++ b/.github/workflows/curator-api-node.yml
@@ -20,9 +20,9 @@ jobs:
     runs-on: ubuntu-20.04
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: Use Node.js
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v3
         with:
           node-version: "12.x"
       - name: Build and test
@@ -34,6 +34,6 @@ jobs:
         env:
           CI: true
       - name: Upload test coverage
-        uses: codecov/codecov-action@v1
+        uses: codecov/codecov-action@v3
         with:
           file: verification/curator-service/api/coverage/coverage-final.json
diff --git a/.github/workflows/curator-service-package.yml b/.github/workflows/curator-service-package.yml
index 94ced1a2c..1eca4bd17 100644
--- a/.github/workflows/curator-service-package.yml
+++ b/.github/workflows/curator-service-package.yml
@@ -24,7 +24,7 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       -
         name: Prepare
         id: prep
@@ -45,14 +45,14 @@ jobs:
           echo ::set-output name=version::${VERSION}
           echo ::set-output name=tags::${TAGS}
           echo ::set-output name=created::$(date -u +'%Y-%m-%dT%H:%M:%SZ')
-      - uses: docker/login-action@v1
+      - uses: docker/login-action@v2
         with:
           username: ${{ github.actor }}
           # https://github.com/globaldothealth/list/settings/secrets
           # https://docs.github.com/en/packages/getting-started-with-github-container-registry/migrating-to-github-container-registry-for-docker-images#authenticating-with-the-container-registry
           password: ${{ secrets.GITHUB_TOKEN }}
           registry: ghcr.io
-      - uses: docker/build-push-action@v2
+      - uses: docker/build-push-action@v3
         with:
           file: verification/curator-service/Dockerfile
           push: true
diff --git a/.github/workflows/curator-ui-node.yml b/.github/workflows/curator-ui-node.yml
index 36b7aa03e..0a8944269 100644
--- a/.github/workflows/curator-ui-node.yml
+++ b/.github/workflows/curator-ui-node.yml
@@ -20,9 +20,9 @@ jobs:
     runs-on: ubuntu-20.04
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: Use Node.js
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v3
         with:
           node-version: "12.x"
       - name: Build and test
@@ -36,6 +36,6 @@ jobs:
         env:
           CI: true
       - name: Upload test coverage
-        uses: codecov/codecov-action@v1
+        uses: codecov/codecov-action@v3
         with:
           file: verification/curator-service/ui/coverage/coverage-final.json
diff --git a/.github/workflows/data-service-node.yml b/.github/workflows/data-service-node.yml
index 79082119f..da8d135b0 100644
--- a/.github/workflows/data-service-node.yml
+++ b/.github/workflows/data-service-node.yml
@@ -20,9 +20,9 @@ jobs:
     runs-on: ubuntu-20.04
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: Use Node.js
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v3
         with:
           node-version: "12.x"
       - name: Build and test
@@ -34,6 +34,6 @@ jobs:
         env:
           CI: true
       - name: Upload test coverage
-        uses: codecov/codecov-action@v1
+        uses: codecov/codecov-action@v3
         with:
           file: data-serving/data-service/coverage/coverage-final.json
diff --git a/.github/workflows/data-service-package.yml b/.github/workflows/data-service-package.yml
index c2f0a6600..4b81028bf 100644
--- a/.github/workflows/data-service-package.yml
+++ b/.github/workflows/data-service-package.yml
@@ -23,7 +23,7 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       -
         name: Prepare
         id: prep
@@ -42,14 +42,14 @@ jobs:
             TAGS="$TAGS,${DOCKER_IMAGE}:sha-${GITHUB_SHA::8}"
           fi
           echo ::set-output name=tags::${TAGS}
-      - uses: docker/login-action@v1
+      - uses: docker/login-action@v2
         with:
           username: ${{ github.actor }}
           # https://github.com/globaldothealth/list/settings/secrets
           # https://docs.github.com/en/packages/getting-started-with-github-container-registry/migrating-to-github-container-registry-for-docker-images#authenticating-with-the-container-registry
           password: ${{ secrets.GITHUB_TOKEN }}
           registry: ghcr.io
-      - uses: docker/build-push-action@v2
+      - uses: docker/build-push-action@v3
         with:
           file: data-serving/data-service/Dockerfile
           push: true
diff --git a/.github/workflows/export-deploy.yml b/.github/workflows/export-deploy.yml
index 0c549018e..6e5dd3a4c 100644
--- a/.github/workflows/export-deploy.yml
+++ b/.github/workflows/export-deploy.yml
@@ -13,7 +13,7 @@ jobs:
   deploy:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Configure AWS credentials
       uses: aws-actions/configure-aws-credentials@v1
       with:
diff --git a/.github/workflows/export-tests.yml b/.github/workflows/export-tests.yml
index eabba7475..e03694ca0 100644
--- a/.github/workflows/export-tests.yml
+++ b/.github/workflows/export-tests.yml
@@ -21,9 +21,9 @@ jobs:
       run:
         working-directory: data-serving/scripts/export-data
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up Python 3.10
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: '3.10'
     - name: Lint with shellcheck
diff --git a/.github/workflows/freshness.yml b/.github/workflows/freshness.yml
index 7582d2885..4d6b3d9b4 100644
--- a/.github/workflows/freshness.yml
+++ b/.github/workflows/freshness.yml
@@ -11,7 +11,7 @@ jobs:
       run:
         working-directory: ingestion/monitoring
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Configure AWS credentials
       uses: aws-actions/configure-aws-credentials@v1
       with:
@@ -19,7 +19,7 @@ jobs:
         aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
         aws-region: eu-central-1
     - name: Set up Python 3.9
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: 3.9
     - name: Install dependencies
diff --git a/.github/workflows/geocoding-service-package.yml b/.github/workflows/geocoding-service-package.yml
index 5fddd2680..4121417cc 100644
--- a/.github/workflows/geocoding-service-package.yml
+++ b/.github/workflows/geocoding-service-package.yml
@@ -23,7 +23,7 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       -
         name: Prepare
         id: prep
@@ -42,14 +42,14 @@ jobs:
             TAGS="$TAGS,${DOCKER_IMAGE}:sha-${GITHUB_SHA::8}"
           fi
           echo ::set-output name=tags::${TAGS}
-      - uses: docker/login-action@v1
+      - uses: docker/login-action@v2
         with:
           username: ${{ github.actor }}
           # https://github.com/globaldothealth/list/settings/secrets
           # https://docs.github.com/en/packages/getting-started-with-github-container-registry/migrating-to-github-container-registry-for-docker-images#authenticating-with-the-container-registry
           password: ${{ secrets.GITHUB_TOKEN }}
           registry: ghcr.io
-      - uses: docker/build-push-action@v2
+      - uses: docker/build-push-action@v3
         with:
           file: geocoding/location-service/Dockerfile
           push: true
diff --git a/.github/workflows/geocoding-service-python.yml b/.github/workflows/geocoding-service-python.yml
index 06bae111e..309cfca57 100644
--- a/.github/workflows/geocoding-service-python.yml
+++ b/.github/workflows/geocoding-service-python.yml
@@ -19,9 +19,9 @@ jobs:
       run:
         working-directory: geocoding/location-service
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up Python 3.8
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: 3.8
     - name: Lint with flake8
diff --git a/.github/workflows/ingestion-cleanup-deploy.yml b/.github/workflows/ingestion-cleanup-deploy.yml
index 1243c46fe..50c8cb513 100644
--- a/.github/workflows/ingestion-cleanup-deploy.yml
+++ b/.github/workflows/ingestion-cleanup-deploy.yml
@@ -18,7 +18,7 @@ jobs:
   deploy:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Configure AWS credentials
       uses: aws-actions/configure-aws-credentials@v1
       with:
diff --git a/.github/workflows/ingestion-functions-deploy.yml b/.github/workflows/ingestion-functions-deploy.yml
index 9f04ac644..cc4966ab8 100644
--- a/.github/workflows/ingestion-functions-deploy.yml
+++ b/.github/workflows/ingestion-functions-deploy.yml
@@ -16,7 +16,7 @@ jobs:
   deploy:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Configure AWS credentials
       uses: aws-actions/configure-aws-credentials@v1
       with:
diff --git a/.github/workflows/ingestion-functions-python.yml b/.github/workflows/ingestion-functions-python.yml
index 226b2d901..45ad28833 100644
--- a/.github/workflows/ingestion-functions-python.yml
+++ b/.github/workflows/ingestion-functions-python.yml
@@ -21,9 +21,9 @@ jobs:
       run:
         working-directory: ingestion/functions
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up Python 3.8
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: 3.8
     - name: Lint with flake8
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index 9d52e0469..699f8d283 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -28,7 +28,7 @@ jobs:
     name: Cypress tests on ${{ matrix.browser }}
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: Build stack
         run: docker-compose -f dev/docker-compose.yml -f dev/docker-compose.ci.yml up --build -d -V
       - uses: cypress-io/github-action@v4
diff --git a/.github/workflows/kubemon.yml b/.github/workflows/kubemon.yml
index eee0395d0..0770cc5af 100644
--- a/.github/workflows/kubemon.yml
+++ b/.github/workflows/kubemon.yml
@@ -19,9 +19,9 @@ jobs:
       run:
         working-directory: k8s/monitoring
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up Python 3.10
-      uses: actions/setup-python@v1
+      uses: actions/setup-python@v4
       with:
         python-version: '3.10'
     - name: Set up poetry
diff --git a/.github/workflows/monitoring-notify.yml b/.github/workflows/monitoring-notify.yml
index 55ffffc5e..76ae3dd73 100644
--- a/.github/workflows/monitoring-notify.yml
+++ b/.github/workflows/monitoring-notify.yml
@@ -12,7 +12,7 @@ jobs:
       run:
         working-directory: ingestion/monitoring
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Configure AWS credentials
       uses: aws-actions/configure-aws-credentials@v1
       with:
@@ -21,7 +21,7 @@ jobs:
         aws-region: eu-central-1
 
     - name: Set up Python 3.8
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: 3.8
     - name: Install dependencies
diff --git a/.github/workflows/monitoring-tests.yml b/.github/workflows/monitoring-tests.yml
index c53c14218..9cc021b75 100644
--- a/.github/workflows/monitoring-tests.yml
+++ b/.github/workflows/monitoring-tests.yml
@@ -19,9 +19,9 @@ jobs:
       run:
         working-directory: ingestion/monitoring
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up Python 3.9
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: 3.9
     - name: Install dependencies
diff --git a/.github/workflows/prune-deploy.yml b/.github/workflows/prune-deploy.yml
index 768ca8f70..744611e2b 100644
--- a/.github/workflows/prune-deploy.yml
+++ b/.github/workflows/prune-deploy.yml
@@ -13,7 +13,7 @@ jobs:
   deploy:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Configure AWS credentials
       uses: aws-actions/configure-aws-credentials@v1
       with:
diff --git a/.github/workflows/prune-uploads-tests.yml b/.github/workflows/prune-uploads-tests.yml
index 0c19862f5..08824c591 100644
--- a/.github/workflows/prune-uploads-tests.yml
+++ b/.github/workflows/prune-uploads-tests.yml
@@ -21,9 +21,9 @@ jobs:
       run:
         working-directory: data-serving/scripts/prune-uploads
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up Python 3.9
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: 3.9
     - name: Install dependencies
diff --git a/.github/workflows/r-package.yml b/.github/workflows/r-package.yml
index c1d13e2b6..9f2748c24 100644
--- a/.github/workflows/r-package.yml
+++ b/.github/workflows/r-package.yml
@@ -18,7 +18,7 @@ jobs:
       run:
         working-directory: api/R
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - uses: r-lib/actions/setup-r@v2
       with:
         r-version: '4.1'
diff --git a/.github/workflows/reusable-data-service-ci.yml b/.github/workflows/reusable-data-service-ci.yml
index a2ce0eeeb..81e7f96c0 100644
--- a/.github/workflows/reusable-data-service-ci.yml
+++ b/.github/workflows/reusable-data-service-ci.yml
@@ -19,9 +19,9 @@ jobs:
       run:
         working-directory: data-serving/reusable-data-service
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up Python 3.10
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: '3.10.5'
     - name: Lint with flake8
diff --git a/.github/workflows/suggest-python.yml b/.github/workflows/suggest-python.yml
index c7d560c11..105fd6969 100644
--- a/.github/workflows/suggest-python.yml
+++ b/.github/workflows/suggest-python.yml
@@ -19,9 +19,9 @@ jobs:
       run:
         working-directory: suggest/acronyms
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up Python 3.8
-      uses: actions/setup-python@v1
+      uses: actions/setup-python@v4
       with:
         python-version: 3.8
     - name: Install dependencies
diff --git a/.github/workflows/update-dev-curator-db-schema.yml b/.github/workflows/update-dev-curator-db-schema.yml
index acb723465..f62a0dcb1 100644
--- a/.github/workflows/update-dev-curator-db-schema.yml
+++ b/.github/workflows/update-dev-curator-db-schema.yml
@@ -15,10 +15,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Set up Node.js
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v3
         with:
           node-version: "12.x"
       
diff --git a/.github/workflows/update-prod-curator-db-schema.yml b/.github/workflows/update-prod-curator-db-schema.yml
index d93c47d39..c4a5fe173 100644
--- a/.github/workflows/update-prod-curator-db-schema.yml
+++ b/.github/workflows/update-prod-curator-db-schema.yml
@@ -12,10 +12,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Set up Node.js
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v3
         with:
           node-version: "12.x"
       
diff --git a/.github/workflows/update-qa-curator-db-schema.yml b/.github/workflows/update-qa-curator-db-schema.yml
index cf210d1aa..16c00b69f 100644
--- a/.github/workflows/update-qa-curator-db-schema.yml
+++ b/.github/workflows/update-qa-curator-db-schema.yml
@@ -12,10 +12,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Set up Node.js
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v3
         with:
           node-version: "16.x"