diff --git a/.github/workflows/engine_js_build.yml b/.github/workflows/engine_js_build.yml
index 297135f08..45e7e942b 100644
--- a/.github/workflows/engine_js_build.yml
+++ b/.github/workflows/engine_js_build.yml
@@ -12,6 +12,6 @@ jobs:
     if: ${{ github.event_name == 'workflow_dispatch' || github.event_name == 'merge_group' }}
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: DeterminateSystems/nix-installer-action@main
     - run: nix build .\#hax-engine.passthru.js -L  
diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index 8204d4e66..ec0664ba7 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -12,7 +12,7 @@ jobs:
     name: ocamlformat
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: DeterminateSystems/nix-installer-action@main
     - name: Run OCaml formatter
       run: |
@@ -23,7 +23,7 @@ jobs:
     name: rustfmt
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: DeterminateSystems/nix-installer-action@main
     - name: Run Rust formatter
       run: |
diff --git a/.github/workflows/install_and_test.yml b/.github/workflows/install_and_test.yml
index cfc02641a..40a7edf41 100644
--- a/.github/workflows/install_and_test.yml
+++ b/.github/workflows/install_and_test.yml
@@ -12,7 +12,7 @@ jobs:
     name: nix-action
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: DeterminateSystems/nix-installer-action@main
     - uses: cachix/cachix-action@v15
       with:
@@ -44,7 +44,7 @@ jobs:
         nix build .#rust-by-example-hax-extraction -L
 
     - name: Checkout specifications
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         repository: 'hacspec/specs'
         path: specs
diff --git a/.github/workflows/licenses.yml b/.github/workflows/licenses.yml
index 914ab0ab7..e488007eb 100644
--- a/.github/workflows/licenses.yml
+++ b/.github/workflows/licenses.yml
@@ -12,7 +12,7 @@ jobs:
     name: nix-action
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: extractions/setup-just@v1
     - name: Set-up OCaml
       uses: ocaml/setup-ocaml@v3
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b216912a7..da77e34a0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,7 +12,7 @@ jobs:
     permissions:
       contents: write
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: DeterminateSystems/nix-installer-action@main
     - name: Build JS
       run: nix build .#hax-engine.passthru.js -L -o hax-engine.js
@@ -41,7 +41,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - uses: ocaml/setup-ocaml@v2
         with:
diff --git a/.github/workflows/test_installs.yml b/.github/workflows/test_installs.yml
index 9f5bc725f..58a6633ad 100644
--- a/.github/workflows/test_installs.yml
+++ b/.github/workflows/test_installs.yml
@@ -12,7 +12,7 @@ jobs:
     if: ${{ github.event_name == 'workflow_dispatch'  || github.event_name == 'merge_group'  }}
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - run: docker build -f .docker/Dockerfile . -t hax
   setup_sh:
     if: ${{ github.event_name == 'workflow_dispatch'  || github.event_name == 'merge_group'   }}
@@ -25,7 +25,7 @@ jobs:
           - macos-13
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - if: runner.os == 'macOS'
       run: brew install opam nodejs rustup-init jq
     - if: runner.os == 'Linux'
diff --git a/dependabot.yml b/dependabot.yml
index 304f54aa1..1af3daf8d 100644
--- a/dependabot.yml
+++ b/dependabot.yml
@@ -4,3 +4,7 @@ updates:
   directory: "/"
   schedule:
     interval: "weekly"
+- package-ecosystem: "github-actions"
+  directory: "/"
+  schedule:
+    interval: "weekly"