diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 692fd0900..f824cda8e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,6 +8,11 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+  pull-requests: write
+  checks: write
+
 jobs:
   lint-and-test:
     runs-on: ubuntu-latest
@@ -51,7 +56,7 @@ jobs:
           retention-days: 30
 
       - name: code coverage report
-        uses: 5monkeys/cobertura-action@master
+        uses: colinscz/cobertura-action@v15
         if: github.event_name == 'pull_request' && !cancelled()
         with:
           path: libraries/ui-library/coverage/cobertura-coverage.xml
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 11bbcf843..77a99dad3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -124,13 +124,14 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: 'Create GitHub release'
-        uses: actions/create-release@latest
+        uses: softprops/action-gh-release@v3
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           tag_name: ${{ inputs.version }}
-          release_name: '${{ inputs.version }}'
-          body: '${{ inputs.version }}'
+          name: '${{ inputs.version }}'
+          generate_release_notes: true
+          make_latest: true
 
       - name: 'Deploy Documentation'
         uses: JamesIves/github-pages-deploy-action@v4