diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index df287df..9270d25 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,11 +16,11 @@ jobs:
           - zehnder-comfoair-q-m5stack-atom.yml
           - zehnder-comfoair-q-m5stack-atoms3.yml
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.7
       - name: Mock secrets.yaml from example
         run: cp secrets.yaml.example secrets.yaml
       - name: Build ESPHome firmware to verify configuration
-        uses: esphome/build-action@v2.0.0
+        uses: esphome/build-action@v3.2.0
         with:
           yaml_file: ${{ matrix.file }}
           cache: true
diff --git a/.github/workflows/publish-common.yml b/.github/workflows/publish-common.yml
index e81fa4b..06d3d4c 100644
--- a/.github/workflows/publish-common.yml
+++ b/.github/workflows/publish-common.yml
@@ -50,10 +50,10 @@ jobs:
     outputs:
       esphome-version: ${{ steps.esphome-build.outputs.esphome-version }}
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.7
       - name: Mock secrets.yaml from example
         run: cp secrets.yaml.example secrets.yaml
-      - uses: esphome/build-action@v2.0.0
+      - uses: esphome/build-action@v3.2.0
         id: esphome-build
         with:
           cache: false
@@ -72,7 +72,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [build]
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.7
       - uses: actions/download-artifact@v3.0.2
         with:
           path: output