diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 27d5a7382a..1b4f9c3ac6 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -42,7 +42,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -53,7 +53,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v3
+      uses: github/codeql-action/autobuild@v4
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -67,4 +67,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4
diff --git a/.github/workflows/deploy_preview.yml b/.github/workflows/deploy_preview.yml
index 341d9af075..0ee6c2168c 100644
--- a/.github/workflows/deploy_preview.yml
+++ b/.github/workflows/deploy_preview.yml
@@ -14,7 +14,7 @@ permissions:
 jobs:
   deploy:
     if: ${{ github.repository == 'primer/css' }}
-    uses: primer/.github/.github/workflows/deploy_preview.yml@v2.2.0
+    uses: primer/.github/.github/workflows/deploy_preview.yml@v2.2.1
     name: Deploy preview
     secrets:
       gh_token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/deploy_production.yml b/.github/workflows/deploy_production.yml
index 3bbf7a746d..0bd7921cea 100644
--- a/.github/workflows/deploy_production.yml
+++ b/.github/workflows/deploy_production.yml
@@ -39,7 +39,7 @@ jobs:
     if: ${{ github.repository == 'primer/css' }}
     name: Production
     needs: [guard]
-    uses: primer/.github/.github/workflows/deploy.yml@v2.2.0
+    uses: primer/.github/.github/workflows/deploy.yml@v2.2.1
     secrets:
       gh_token: ${{ secrets.GITHUB_TOKEN }}
     with:
diff --git a/.github/workflows/release_canary.yml b/.github/workflows/release_canary.yml
index 5ce410d245..b2bc0e33f9 100644
--- a/.github/workflows/release_canary.yml
+++ b/.github/workflows/release_canary.yml
@@ -18,7 +18,7 @@ on:
 jobs:
   release-canary:
     name: Canary
-    uses: primer/.github/.github/workflows/release_canary.yml@v2.2.0
+    uses: primer/.github/.github/workflows/release_canary.yml@v2.2.1
     with:
       install: npm ci
     secrets:
diff --git a/.github/workflows/release_tracking.yml b/.github/workflows/release_tracking.yml
index 8727af2b1e..facc81f30f 100644
--- a/.github/workflows/release_tracking.yml
+++ b/.github/workflows/release_tracking.yml
@@ -14,6 +14,6 @@ on:
 jobs:
   release-tracking:
     name: Release Tracking
-    uses: primer/.github/.github/workflows/release_tracking.yml@v2.2.0
+    uses: primer/.github/.github/workflows/release_tracking.yml@v2.2.1
     secrets:
       datadog_api_key: ${{ secrets.DATADOG_API_KEY }}