diff --git a/.github/workflows/build-and-publish-debug.yml b/.github/workflows/build-and-publish-debug.yml
index 3b32b2ebe44..09828b9055f 100644
--- a/.github/workflows/build-and-publish-debug.yml
+++ b/.github/workflows/build-and-publish-debug.yml
@@ -19,7 +19,7 @@ jobs:
     if: github.repository == 'hpcc-systems/HPCC-Platform'
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Build
         uses: ./dockerfiles
         with:
diff --git a/.github/workflows/build-and-publish.yml b/.github/workflows/build-and-publish.yml
index 5d869bfc44c..87b15faf0d2 100644
--- a/.github/workflows/build-and-publish.yml
+++ b/.github/workflows/build-and-publish.yml
@@ -19,7 +19,7 @@ jobs:
     if: github.repository == 'hpcc-systems/HPCC-Platform'
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Build
         uses: ./dockerfiles
         with:
@@ -42,7 +42,7 @@ jobs:
         engine: ['ml', 'gnn', 'gnn-gpu']
     steps:
     - name: Checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
     - name: Build
       uses: ./dockerfiles
       with:
diff --git a/.github/workflows/build-assets.yml b/.github/workflows/build-assets.yml
index 3ae7495c01a..6838b6699a0 100644
--- a/.github/workflows/build-assets.yml
+++ b/.github/workflows/build-assets.yml
@@ -68,14 +68,14 @@ jobs:
           echo "${{ toJSON(steps.vars.outputs) }})"
 
       - name: Release HPCC-Platform
-        uses: ncipollo/release-action@v1.12.0
+        uses: ncipollo/release-action@v1.14.0
         with:
           allowUpdates: true
           generateReleaseNotes: false
           prerelease: ${{ contains(github.ref, '-rc') }}
 
       - name: Release LN
-        uses: ncipollo/release-action@v1.12.0
+        uses: ncipollo/release-action@v1.14.0
         with:
           allowUpdates: true
           generateReleaseNotes: false
@@ -123,7 +123,7 @@ jobs:
           sudo rm -rf /usr/local/lib/android
 
       - name: Checkout HPCC-Platform
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: ${{ needs.preamble.outputs.community_ref }}
           submodules: recursive
@@ -131,7 +131,7 @@ jobs:
 
       - name: Checkout LN
         if: ${{ matrix.ln }}
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: ${{ github.repository_owner }}/LN
           token: ${{ secrets.LNB_TOKEN }}
@@ -157,16 +157,16 @@ jobs:
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
       - name: Login to DockerHub
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Create Build Image
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           builder: ${{ steps.buildx.outputs.name }}
           file: ${{ needs.preamble.outputs.folder_platform }}/dockerfiles/vcpkg/${{ matrix.os }}.dockerfile
@@ -228,7 +228,7 @@ jobs:
 
       - name: Upload Assets (community)
         if: ${{ !matrix.ln }}
-        uses: ncipollo/release-action@v1.12.0
+        uses: ncipollo/release-action@v1.14.0
         with:
           allowUpdates: true
           generateReleaseNotes: false
@@ -245,7 +245,7 @@ jobs:
           echo "$k8s_pkg_file"
 
       - name: Create Docker Image (community)
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         if: ${{ !matrix.ln && matrix.container && !matrix.documentation }}
         with:
           builder: ${{ steps.buildx.outputs.name }}
@@ -263,7 +263,7 @@ jobs:
       #  Internal Build  ---
       - name: Login to JFrog (internal)
         if: ${{ matrix.ln && matrix.container && github.repository_owner == 'hpcc-systems' }}
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ${{ secrets.JFROG_REGISTRY }}
           username: ${{ secrets.JFROG_USERNAME }}
@@ -310,7 +310,7 @@ jobs:
 
       - name: Upload Assets (internal)
         if: ${{ matrix.ln }}
-        uses: ncipollo/release-action@v1.12.0
+        uses: ncipollo/release-action@v1.14.0
         with:
           allowUpdates: true
           generateReleaseNotes: false
@@ -359,7 +359,7 @@ jobs:
 
       - name: Upload error logs
         if: ${{ failure() || cancelled() }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.os }}-${{ matrix.ln }}-${{ matrix.container }}-${{ matrix.documentation }}-logs
           path: ${{ needs.preamble.outputs.folder_build }}/**/*.log
@@ -404,14 +404,14 @@ jobs:
           ${{ matrix.sudo }} rm -rf "$VCPKG_INSTALLATION_ROOT"
 
       - name: Checkout HPCC-Platform
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: ${{ needs.preamble.outputs.community_ref }}
           submodules: recursive
           path: ./HPCC-Platform
 
       - name: Checkout LN
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: ${{ github.repository_owner }}/LN
           token: ${{ secrets.LNB_TOKEN }}
@@ -443,7 +443,7 @@ jobs:
           cmake --build ./build ${{ matrix.cmake_build_options }} --target package
 
       - name: Upload Assets
-        uses: ncipollo/release-action@v1.12.0
+        uses: ncipollo/release-action@v1.14.0
         with:
           allowUpdates: true
           generateReleaseNotes: false
@@ -459,7 +459,7 @@ jobs:
           cmake --build ./build ${{ matrix.cmake_build_options }} --target package
 
       - name: Upload LN Assets
-        uses: ncipollo/release-action@v1.12.0
+        uses: ncipollo/release-action@v1.14.0
         with:
           allowUpdates: true
           generateReleaseNotes: false
@@ -472,7 +472,7 @@ jobs:
 
       - name: Upload error logs
         if: ${{ failure() || cancelled() }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.os }}-logs
           path: ./build/**/*.log
diff --git a/.github/workflows/build-containers-pr.yml b/.github/workflows/build-containers-pr.yml
index c5cca9badd6..7ddad46cd59 100644
--- a/.github/workflows/build-containers-pr.yml
+++ b/.github/workflows/build-containers-pr.yml
@@ -65,7 +65,7 @@ jobs:
           echo "platform_build = ${{ steps.vars.outputs.platform_build }}"
 
       - name: Checkout PR
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Calculate vcpkg vars
         id: vcpkg_vars
@@ -78,7 +78,7 @@ jobs:
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v3
         with:
           driver: docker
 
@@ -107,7 +107,7 @@ jobs:
       # or they'll be a "latest" which will have been picked up by the check-images step.
       - name: branch image
         if: ${{ steps.check-images.outputs.prbase_missing == '1' }}
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v5
         with:
           context: .
           file: ./dockerfiles/platform-build/Dockerfile
@@ -127,7 +127,7 @@ jobs:
             BUILD_THREADS=${{ steps.vars.outputs.build_threads }}
 
       - name: PR image
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v5
         with:
           context: .
           file: ./dockerfiles/platform-build-incremental-container/Dockerfile
diff --git a/.github/workflows/build-containers-target-branch.yml b/.github/workflows/build-containers-target-branch.yml
index dafe221a23e..f9072e6b53c 100644
--- a/.github/workflows/build-containers-target-branch.yml
+++ b/.github/workflows/build-containers-target-branch.yml
@@ -62,7 +62,7 @@ jobs:
           echo "build_base_label = ${{ steps.vars.outputs.build_base_label }}"
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Calculate vcpkg vars
         id: vcpkg_vars
@@ -75,24 +75,24 @@ jobs:
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v3
 
       # - name: Login to GitHub Container Registry
-      #   uses: docker/login-action@v1
+      #   uses: docker/login-action@v3
       #   with:
       #     registry: ghcr.io
       #     username: ${{ github.repository_owner }}
       #     password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Login to DockerHub
-        uses: docker/login-action@v1
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       # build branch image
       - name: branch image
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v5
         with:
           context: .
           file: ./dockerfiles/platform-build/Dockerfile
diff --git a/.github/workflows/build-test-eclwatch.yml b/.github/workflows/build-test-eclwatch.yml
index 13eee0bfa2a..7a9c561af5f 100644
--- a/.github/workflows/build-test-eclwatch.yml
+++ b/.github/workflows/build-test-eclwatch.yml
@@ -25,21 +25,21 @@ jobs:
   build:
     strategy:
       matrix:
-        node: ["18", "16"]
+        node: ["20", "18", "16"]
       fail-fast: false
     name: "Check eclwatch and npm"
     needs: pre_job
     if: ${{ needs.pre_job.outputs.eclwatch }}
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: "recursive"
-      - uses: actions/setup-node@v2
+      - uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node }}
       - name: Cache node modules
-        uses: actions/cache@v2
+        uses: actions/cache@v4
         with:
           path: ./esp/src/node_modules
           key: npm-deps-${{ hashFiles('./esp/src/package-lock.json') }}
diff --git a/.github/workflows/build-vcpkg.yml b/.github/workflows/build-vcpkg.yml
index 9613f08ed0c..4ebc0c80bf2 100644
--- a/.github/workflows/build-vcpkg.yml
+++ b/.github/workflows/build-vcpkg.yml
@@ -106,7 +106,7 @@ jobs:
 
       - name: Checkout HPCC-Platform
         if: ${{ contains(matrix.event_name, github.event_name) && needs.preamble.outputs.platform }}
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: ${{ needs.preamble.outputs.community_ref }}
           submodules: recursive
@@ -114,7 +114,7 @@ jobs:
 
       - name: Checkout LN
         if: ${{ matrix.ln && contains(matrix.event_name, github.event_name) }}
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: ${{ github.repository_owner }}/LN
           token: ${{ secrets.LNB_TOKEN }}
@@ -142,7 +142,7 @@ jobs:
       - name: Set up Docker Buildx
         if: ${{ contains(matrix.event_name, github.event_name) && needs.preamble.outputs.platform }}
         id: buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
       - name: Pull previous images
         run: |
@@ -151,7 +151,7 @@ jobs:
 
       - name: Create Build Image  
         if: ${{ contains(matrix.event_name, github.event_name) && needs.preamble.outputs.platform }}
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           builder: ${{ steps.buildx.outputs.name }}
           file: ${{ needs.preamble.outputs.folder_platform }}/dockerfiles/vcpkg/${{ matrix.os }}.dockerfile
@@ -215,7 +215,7 @@ jobs:
       #  Common  ---
       - name: Upload error logs
         if: ${{ failure() || cancelled() }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.os }}-${{ matrix.ln }}-${{ matrix.container }}-logs
           path: ${{ needs.preamble.outputs.folder_build }}/**/*.log
@@ -326,7 +326,7 @@ jobs:
 
       - name: Checkout HPCC-Platform
         if: ${{ contains(matrix.event_name, github.event_name) && needs.preamble.outputs.platform }}
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: ${{ needs.preamble.outputs.community_ref }}
           submodules: recursive
@@ -360,7 +360,7 @@ jobs:
 
       - name: Upload error logs
         if: ${{ failure() || cancelled() }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.os }}--${{ matrix.ln }}-${{ matrix.container }}-logs
           path: ./build/**/*.log
diff --git a/.github/workflows/codeql-eclwatch.yml b/.github/workflows/codeql-eclwatch.yml
index 14a0635f3d4..2b34ca1ae87 100644
--- a/.github/workflows/codeql-eclwatch.yml
+++ b/.github/workflows/codeql-eclwatch.yml
@@ -51,11 +51,11 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v1
+        uses: github/codeql-action/init@v3
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -80,4 +80,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v1
+        uses: github/codeql-action/analyze@v3
diff --git a/.github/workflows/jirabot.yml b/.github/workflows/jirabot.yml
index 7ee726192de..c561bcca098 100644
--- a/.github/workflows/jirabot.yml
+++ b/.github/workflows/jirabot.yml
@@ -14,7 +14,7 @@ jobs:
   jirabot:
     runs-on: ubuntu-20.04
     steps:
-      - uses: "actions/setup-python@v2"
+      - uses: "actions/setup-python@v5"
         with:
           python-version: "3.8"
       - name: "Install dependencies"
diff --git a/.github/workflows/nightly-publish.yml b/.github/workflows/nightly-publish.yml
index 3aab3451a45..859b9d82f74 100644
--- a/.github/workflows/nightly-publish.yml
+++ b/.github/workflows/nightly-publish.yml
@@ -14,7 +14,7 @@ jobs:
         run: |
           echo "::set-output name=date::$(date +'%Y-%m-%d')"
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Build
         uses: ./dockerfiles
         with:
diff --git a/.github/workflows/smoketest.yml b/.github/workflows/smoketest.yml
index 0428925cbaf..a057e301a23 100644
--- a/.github/workflows/smoketest.yml
+++ b/.github/workflows/smoketest.yml
@@ -124,7 +124,7 @@ jobs:
     # NB: restore-keys set to e.g. hpccbuild-2-7.12.10, hpccbuild-2-7.12, hpccbuild-2-7, hpccbuild-2-
     - name: Fetch cache
       id: cache
-      uses: actions/cache@v2
+      uses: actions/cache@v4
       with:
         path: |
           build-cache
@@ -292,7 +292,7 @@ jobs:
 
     - name: build-logs-artifact
       if: ${{ failure() }}
-      uses: actions/upload-artifact@v2
+      uses: actions/upload-artifact@v4
       with:
         name: build-logs
         path: |
@@ -356,7 +356,7 @@ jobs:
 
     - name: regression-setup-logs-artifact
       if: ${{ failure() || cancelled() }}
-      uses: actions/upload-artifact@v2
+      uses: actions/upload-artifact@v4
       with:
         name: regress-setup-logs
         path: |
@@ -376,7 +376,7 @@ jobs:
 
     - name: Upload install artifact
       if: ${{ steps.check-cache.outputs.state != '' && github.event_name == 'pull_request' }}
-      uses: actions/upload-artifact@v2
+      uses: actions/upload-artifact@v4
       with:
         name: installsetup-artifact
         path: |
@@ -419,7 +419,7 @@ jobs:
             pattern: teststdlibrary.ecl
 
     steps:
-    - uses: actions/download-artifact@v2
+    - uses: actions/download-artifact@v4
       with:
         name: installsetup-artifact
 
@@ -468,7 +468,7 @@ jobs:
 
     - name: regression-run-logs-artifact
       if: ${{ failure() || cancelled() }}
-      uses: actions/upload-artifact@v2
+      uses: actions/upload-artifact@v4
       with:
         name: regression-run-logs-${{ matrix.engine }}-${{ steps.vars.outputs.matrix-setname }}
         path: |
@@ -485,7 +485,7 @@ jobs:
     timeout-minutes: 30 # the unittests run step has its own timeout, however the job can sometimes take time to download dependencies
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/download-artifact@v2
+    - uses: actions/download-artifact@v4
       with:
         name: installsetup-artifact
 
@@ -516,7 +516,7 @@ jobs:
     timeout-minutes: 30 # the ui-tests run step has its own timeout, however the job can sometimes take time to download dependencies
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/download-artifact@v2
+    - uses: actions/download-artifact@v4
       with:
         name: installsetup-artifact
 
@@ -585,7 +585,7 @@ jobs:
 
     - name: eclwatch-ui-test-logs-artifact
       if: ${{ failure() || cancelled() }}
-      uses: actions/upload-artifact@v2
+      uses: actions/upload-artifact@v4
       with:
         name: ECLWatchUiTest
         path: install/test-ui/eclWatchUiTest.log
diff --git a/.github/workflows/test-eclhelper.yml b/.github/workflows/test-eclhelper.yml
index 4098beaa64d..5315c359593 100644
--- a/.github/workflows/test-eclhelper.yml
+++ b/.github/workflows/test-eclhelper.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout pr
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           fetch-depth: 1
       - name: Fetch base
diff --git a/.github/workflows/test-helm.yml b/.github/workflows/test-helm.yml
index f25bb5c33db..b0cc9d8f556 100644
--- a/.github/workflows/test-helm.yml
+++ b/.github/workflows/test-helm.yml
@@ -40,7 +40,7 @@ jobs:
     needs: pre_job
     if: ${{ github.repository == 'hpcc-systems/HPCC-Platform' && needs.pre_job.outputs.helm }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: false
       - uses: azure/setup-helm@v3