diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 9b3a0a9..d6f34e4 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -74,7 +74,7 @@ jobs:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Set restic backup secret
-        uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
+        uses: azure/k8s-create-secret@5e49ad902ac755e0815974a44904c728da961747 # v6.0.0
         with:
           namespace: ${{ steps.namespace.outputs.namespace }}
           secret-name: backupsidecar-secret
diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml
index fe09704..e0b9339 100644
--- a/.gitea/workflows/release.yaml
+++ b/.gitea/workflows/release.yaml
@@ -23,6 +23,6 @@ jobs:
         with:
           token: ${{ secrets.GITEA_TOKEN }}
       - name: Push tag
-        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@47a1c635cfc76cfb4eeee3db0d0b89bf19007c7a # 0.2.3
+        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@38c1bbd8bad3e7965744d03de85faa4a5b808d1b # 0.2.4
         with:
           tag: ${{ steps.tag.outputs.new-tag }}
diff --git a/.gitea/workflows/validate.yaml b/.gitea/workflows/validate.yaml
index c8e5977..51f895b 100644
--- a/.gitea/workflows/validate.yaml
+++ b/.gitea/workflows/validate.yaml
@@ -69,7 +69,7 @@ jobs:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Validate k8s manifests
-        uses: azure/k8s-lint@6aefe5066f95e73d2b140d8835cc95583b886989 # v3.0.1
+        uses: azure/k8s-lint@e4234c50ea835112e72b145bdecd00a94bad42fd # v4.0.0
         with:
           namespace: ${{ steps.namespace.outputs.namespace }}
           lintType: dryrun