diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
index 30b7a4457..4cc179bfe 100644
--- a/.github/workflows/push.yaml
+++ b/.github/workflows/push.yaml
@@ -21,28 +21,28 @@ jobs:
     name: Check source
     runs-on: ubuntu-latest
     steps:
-      - uses: cachix/install-nix-action@v22
+      - uses: cachix/install-nix-action@v25
         with:
           nix_path: nixpkgs=channel:nixos-unstable
-      - uses: cachix/cachix-action@v12
+      - uses: cachix/cachix-action@v14
         with:
           name: coliasgroup
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Check source
         run: make check-source
   check-dependencies:
     name: Check dependencies
     runs-on: ubuntu-latest
     steps:
-      - uses: cachix/install-nix-action@v22
+      - uses: cachix/install-nix-action@v25
         with:
           nix_path: nixpkgs=channel:nixos-unstable
-      - uses: cachix/cachix-action@v12
+      - uses: cachix/cachix-action@v14
         with:
           name: coliasgroup
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Check dependencies
         run: make check-dependencies
   run-sel4test:
@@ -53,14 +53,14 @@ jobs:
       matrix:
         arch: [aarch64, aarch32, riscv64, riscv32, x86_64, ia32]
     steps:
-      - uses: cachix/install-nix-action@v22
+      - uses: cachix/install-nix-action@v25
         with:
           nix_path: nixpkgs=channel:nixos-unstable
-      - uses: cachix/cachix-action@v12
+      - uses: cachix/cachix-action@v14
         with:
           name: coliasgroup
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Build and check
         run: make run-sel4test-for SEL4TEST_ARCH=${{ matrix.arch }}
   run-other-tests:
@@ -79,30 +79,30 @@ jobs:
           remove-haskell: 'true'
           remove-codeql: 'true'
           remove-docker-images: 'true'
-      - uses: cachix/install-nix-action@v22
+      - uses: cachix/install-nix-action@v25
         with:
           nix_path: nixpkgs=channel:nixos-unstable
           extra_nix_config: |
             auto-optimise-store = true
-      - uses: cachix/cachix-action@v12
+      - uses: cachix/cachix-action@v14
         with:
           name: coliasgroup
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Run tests
         run: make run-fast-tests
   build-docs:
     name: Build docs
     runs-on: ubuntu-latest
     steps:
-      - uses: cachix/install-nix-action@v22
+      - uses: cachix/install-nix-action@v25
         with:
           nix_path: nixpkgs=channel:nixos-unstable
-      - uses: cachix/cachix-action@v12
+      - uses: cachix/cachix-action@v14
         with:
           name: coliasgroup
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Build docs
         run: make html-links
   build-everything:
@@ -122,16 +122,16 @@ jobs:
           remove-haskell: 'true'
           remove-codeql: 'true'
           remove-docker-images: 'true'
-      - uses: cachix/install-nix-action@v22
+      - uses: cachix/install-nix-action@v25
         with:
           nix_path: nixpkgs=channel:nixos-unstable
           extra_nix_config: |
             auto-optimise-store = true
-      - uses: cachix/cachix-action@v12
+      - uses: cachix/cachix-action@v14
         with:
           name: coliasgroup
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Build everything
         run: make everything
       - name: Expose docs
@@ -145,7 +145,7 @@ jobs:
     name: Check Kani proofs
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Check Kani proofs
         run: make -C hacking/kani/docker check
   deploy-docs: