diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 84a0181..b2a30ba 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -51,10 +51,10 @@ jobs:
             file_ext: .exe
     runs-on: ${{ matrix.info.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
-      - uses: cargo-prebuilt/cargo-prebuilt-action@v4
+      - uses: cargo-prebuilt/cargo-prebuilt-action@v5
         with:
           pkgs: cargo-auditable
       - uses: dtolnay/rust-toolchain@master
@@ -96,7 +96,7 @@ jobs:
           - target: x86_64-unknown-netbsd
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
       - uses: Swatinem/rust-cache@v2
@@ -130,7 +130,7 @@ jobs:
           - os: ubuntu-latest
     runs-on: ${{ matrix.info.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
       - uses: dtolnay/rust-toolchain@master
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 69b24be..0096aaf 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -33,7 +33,7 @@ jobs:
   fmt:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
       - uses: dtolnay/rust-toolchain@master
@@ -55,7 +55,7 @@ jobs:
           - os: windows-latest
     runs-on: ${{ matrix.info.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
       - uses: dtolnay/rust-toolchain@master
@@ -75,7 +75,7 @@ jobs:
   cargo-deny:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
       - name: aarch64-apple-darwin
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 944d8c2..261d709 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -26,7 +26,7 @@ jobs:
       prerelease: ${{ steps.regex-tag.outputs.match == '' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
       - uses: KyoriPowered/action-regex-match@v4
@@ -39,10 +39,10 @@ jobs:
     runs-on: ubuntu-latest
     needs: [release, build-native, build-ink-cross]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
       - name: Merge hashes
         shell: bash
         run: |
@@ -84,10 +84,10 @@ jobs:
             file_ext: .exe
     runs-on: ${{ matrix.info.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
-      - uses: cargo-prebuilt/cargo-prebuilt-action@v4
+      - uses: cargo-prebuilt/cargo-prebuilt-action@v5
         with:
           pkgs: cargo-auditable,coreutils
       - uses: dtolnay/rust-toolchain@master
@@ -103,7 +103,7 @@ jobs:
       - name: Chmod
         if: ${{ ! contains(matrix.info.target, 'windows') }}
         run: chmod +x ./${{ env.bin-name }}-${{ matrix.info.target }}
-      - uses: actions/attest-build-provenance@v2
+      - uses: actions/attest-build-provenance@v3
         with:
           subject-path: ./${{ env.bin-name }}-${{ matrix.info.target }}${{ matrix.info.file_ext }}
       - name: Hash
@@ -136,10 +136,10 @@ jobs:
           - target: x86_64-unknown-netbsd
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           persist-credentials: false
-      - uses: cargo-prebuilt/cargo-prebuilt-action@v4
+      - uses: cargo-prebuilt/cargo-prebuilt-action@v5
         with:
           pkgs: coreutils
       - name: Build with ink cross
@@ -153,7 +153,7 @@ jobs:
         run: cp ./target/${{ matrix.info.target }}/zmall/${{ env.bin-name }} ./${{ env.bin-name }}-${{ matrix.info.target }}
       - name: Chmod
         run: chmod +x ./${{ env.bin-name }}-${{ matrix.info.target }}
-      - uses: actions/attest-build-provenance@v2
+      - uses: actions/attest-build-provenance@v3
         with:
           subject-path: ./${{ env.bin-name }}-${{ matrix.info.target }}
       - name: Hash
diff --git a/.github/workflows/scripts-test.yml b/.github/workflows/scripts-test.yml
index aacc15d..45f8e7b 100644
--- a/.github/workflows/scripts-test.yml
+++ b/.github/workflows/scripts-test.yml
@@ -13,7 +13,7 @@ jobs:
   test-install-script-1:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Run install script
         run: ./scripts/install-qstract.sh
       - run: ./qstract ./test/t3archive.tar
@@ -21,7 +21,7 @@ jobs:
   test-install-script-2:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Run install script
         run: LIBC=musl ./scripts/install-qstract.sh
       - run: ./qstract -z ./test/tarchive1.tar.gz
@@ -29,14 +29,14 @@ jobs:
   test-install-script-3:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Run install script
         run: TARGET_STRING=aarch64-apple-darwin ./scripts/install-qstract.sh
 
   test-install-script-4:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Run install script
         run: INSTALL_PATH=/usr/local/bin LIBC=musl ./scripts/install-qstract.sh
       - run: qstract --sha256 ./test/zarchive1.zip