diff --git a/.github/workflows/audit.yaml b/.github/workflows/audit.yaml
index a8a014e7bd50..09be3ee12d68 100644
--- a/.github/workflows/audit.yaml
+++ b/.github/workflows/audit.yaml
@@ -27,7 +27,7 @@ jobs:
           sudo apt update
           sudo apt install g++-10 libgbm1 graphicsmagick fonts-liberation2
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: ${{ matrix.branch }}
           token: ${{ secrets.GOPASS_CI_GITHUB_TOKEN }}
@@ -43,12 +43,12 @@ jobs:
 
       - name: Check .tool-versions file existence
         id: tool-versions
-        uses: andstor/file-existence-action@v2
+        uses: andstor/file-existence-action@v3
         with:
           files: .tool-versions
-      - uses: asdf-vm/actions/install@v1
+      - uses: asdf-vm/actions/install@v3
         if: steps.tool-versions.outputs.files_exists == 'true'
-      - uses: asdf-vm/actions/setup@v1
+      - uses: asdf-vm/actions/setup@v3
         if: steps.tool-versions.outputs.files_exists != 'true'
       - run: cat /tmp/python-build.*.log
         if: failure()
@@ -60,7 +60,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GOPASS_CI_GITHUB_TOKEN }}
       - name: Check ci/dpkg-versions.yaml file existence
         id: dpkg-versions
-        uses: andstor/file-existence-action@v2
+        uses: andstor/file-existence-action@v3
         with:
           files: ci/dpkg-versions.yaml
       - name: Update dpkg packages versions
diff --git a/.github/workflows/clean-ghpages.yaml b/.github/workflows/clean-ghpages.yaml
index f15b35e6dc40..d636d0a56508 100644
--- a/.github/workflows/clean-ghpages.yaml
+++ b/.github/workflows/clean-ghpages.yaml
@@ -22,7 +22,7 @@ jobs:
       - name: GitHub event file
         run: cat ${GITHUB_EVENT_PATH}
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: gh-pages
       - name: Clean ghpages
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 6f643584b233..8b360409ea1b 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -15,19 +15,19 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         if: env.HAS_SECRETS == 'HAS_SECRETS'
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v3
         if: env.HAS_SECRETS == 'HAS_SECRETS'
 
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v2
+        uses: github/codeql-action/autobuild@v3
         if: env.HAS_SECRETS == 'HAS_SECRETS'
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v3
         if: env.HAS_SECRETS == 'HAS_SECRETS'
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 29866b0df6fd..a24ccf8f8fff 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -48,17 +48,17 @@ jobs:
         run: echo "sha=$(jq -r .pull_request.head.sha < ${GITHUB_EVENT_PATH})" >> $GITHUB_OUTPUT
         if: env.HAS_SECRETS == 'HAS_SECRETS' && github.event_name != 'push'
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
         if: github.event_name != 'pull_request_target'
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
           ref: ${{ steps.sha.outputs.sha }}
         if: github.event_name == 'pull_request_target'
 
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
           node-version: 18.x
 
@@ -74,7 +74,7 @@ jobs:
       - run: echo "${HOME}/.local/bin" >> ${GITHUB_PATH}
       - run: python3 -m pip install --user --requirement=ci/requirements.txt
 
-      - uses: actions/cache@v3
+      - uses: actions/cache@v4
         with:
           path: ~/.cache/pre-commit
           key: pre-commit-${{ hashFiles('.pre-commit-config.yaml') }}
@@ -125,28 +125,28 @@ jobs:
           NODE_OPTIONS: --openssl-legacy-provider
       - run: make check-examples
         if: github.event_name != 'pull_request_target'
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: Examples
           path: examples
           if-no-files-found: ignore
           retention-days: 5
         if: always()
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: GMF Examples
           path: contribs/gmf/examples
           if-no-files-found: ignore
           retention-days: 5
         if: always()
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: Apps
           path: contribs/gmf/apps
           if-no-files-found: ignore
           retention-days: 5
         if: always()
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: Examples hosted
           path: .build/examples-hosted
@@ -165,7 +165,7 @@ jobs:
           NODE_OPTIONS: --openssl-legacy-provider
       - run: npm run dist-spinner
 
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: Npm logs
           path: /home/runner/.npm/_logs
@@ -213,7 +213,7 @@ jobs:
           cp -ar .build/storybook gh-pages/storybook
         if: env.HAS_SECRETS == 'HAS_SECRETS'
 
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: gh-pages
           path: gh-pages
@@ -232,7 +232,7 @@ jobs:
         run: echo ${GITHUB_EVENT} | python3 -m json.tool
         env:
           GITHUB_EVENT: ${{ toJson(github) }}
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: gh-pages
           fetch-depth: 0
@@ -244,7 +244,7 @@ jobs:
           GITHUB_REF: ${{ github.head_ref || github.ref_name }}
         if: env.HAS_SECRETS == 'HAS_SECRETS'
 
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4
         with:
           name: gh-pages
           path: ${{ steps.branch.outputs.branch }}
diff --git a/.github/workflows/pr-checks.yaml b/.github/workflows/pr-checks.yaml
index 14489eb5873d..b3e991a226dd 100644
--- a/.github/workflows/pr-checks.yaml
+++ b/.github/workflows/pr-checks.yaml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - run: pip install --upgrade attrs
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - run: echo "${HOME}/.local/bin" >> ${GITHUB_PATH}
       - run: python3 -m pip install --user --pre c2cciutils[pr_checks]
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 05a2a92af55c..9ef77a9bf878 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -47,7 +47,7 @@ repos:
         additional_dependencies:
           - prettier@3.2.5 # npm
           - prettier-plugin-sh@0.14.0 # npm
-          - prettier-plugin-toml@1.0.1 # npm
+          - prettier-plugin-toml@2.0.1 # npm
           - '@prettier/plugin-xml@0.12.0' # npm
         exclude: |-
           (?x)^(
@@ -92,7 +92,7 @@ repos:
             |examples/mapillarystreetview.js
           )$
   - repo: https://github.com/psf/black
-    rev: 23.12.1
+    rev: 24.2.0
     hooks:
       - id: black
   - repo: https://github.com/PyCQA/isort