diff --git a/.github/workflows/darkerbot.yaml b/.github/workflows/darkerbot.yaml
index ae6b887604..88d0a08515 100644
--- a/.github/workflows/darkerbot.yaml
+++ b/.github/workflows/darkerbot.yaml
@@ -23,7 +23,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: "3.10"
 
@@ -32,7 +32,7 @@ jobs:
           pip install PyGithub
 
       - name: 'Download artifact'
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           script: |
             let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 2241f8f7fc..0fed81f587 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -51,7 +51,7 @@ jobs:
           fetch-depth: 0
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v2.16.5
+        uses: pypa/cibuildwheel@v2.19.1
         with:
           package-dir: package
         env:
@@ -63,7 +63,7 @@ jobs:
         if: |
           (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/package')) ||
           (github.event_name == 'release' && github.event.action == 'published')
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           path: wheelhouse/*.whl
           retention-days: 7
@@ -88,7 +88,7 @@ jobs:
         if: |
           (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/package')) ||
           (github.event_name == 'release' && github.event.action == 'published')
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           path: package/dist/*.tar.gz
           retention-days: 7
@@ -113,7 +113,7 @@ jobs:
         if: |
           (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/package')) ||
           (github.event_name == 'release' && github.event.action == 'published')
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           path: testsuite/dist/*.tar.gz
           retention-days: 7
@@ -131,7 +131,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [build_wheels, build_sdist, build_sdist_tests]
     steps:
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4
         with:
           name: artifact
           path: dist
@@ -142,7 +142,7 @@ jobs:
           mv dist/MDAnalysisTests-* testsuite/dist
 
       - name: upload_source_and_wheels
-        uses: pypa/gh-action-pypi-publish@v1.8.10
+        uses: pypa/gh-action-pypi-publish@v1.9.0
         with:
           skip_existing: true
           repository_url: https://test.pypi.org/legacy/
@@ -160,7 +160,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [build_wheels, build_sdist, build_sdist_tests]
     steps:
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4
         with:
           name: artifact
           path: dist
@@ -171,7 +171,7 @@ jobs:
           mv dist/MDAnalysisTests-* testsuite/dist
 
       - name: upload_tests
-        uses: pypa/gh-action-pypi-publish@v1.8.10
+        uses: pypa/gh-action-pypi-publish@v1.9.0
         with:
           packages_dir: testsuite/dist
           skip_existing: true
@@ -190,7 +190,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [build_wheels, build_sdist, build_sdist_tests]
     steps:
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4
         with:
           name: artifact
           path: dist
@@ -201,7 +201,7 @@ jobs:
           mv dist/MDAnalysisTests-* testsuite/dist
 
       - name: upload_source_and_wheels
-        uses: pypa/gh-action-pypi-publish@v1.8.10
+        uses: pypa/gh-action-pypi-publish@v1.9.0
 
   upload_pypi_mdanalysistests:
     if: |
@@ -216,7 +216,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [build_wheels, build_sdist, build_sdist_tests]
     steps:
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4
         with:
           name: artifact
           path: dist
@@ -227,7 +227,7 @@ jobs:
           mv dist/MDAnalysisTests-* testsuite/dist
 
       - name: upload_tests
-        uses: pypa/gh-action-pypi-publish@v1.8.10
+        uses: pypa/gh-action-pypi-publish@v1.9.0
         with:
           packages_dir: testsuite/dist
 
diff --git a/.github/workflows/gh-ci-cron.yaml b/.github/workflows/gh-ci-cron.yaml
index fdfbf58905..72c7e36538 100644
--- a/.github/workflows/gh-ci-cron.yaml
+++ b/.github/workflows/gh-ci-cron.yaml
@@ -194,7 +194,7 @@ jobs:
       with:
         os-type: "ubuntu"
 
-    - uses: actions/setup-python@v4
+    - uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
 
@@ -285,7 +285,7 @@ jobs:
       with:
         os-type: ${{ matrix.os }}
 
-    - uses: actions/setup-python@v4
+    - uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
 
diff --git a/.github/workflows/gh-ci.yaml b/.github/workflows/gh-ci.yaml
index d705012a4d..05bda86b3c 100644
--- a/.github/workflows/gh-ci.yaml
+++ b/.github/workflows/gh-ci.yaml
@@ -123,7 +123,7 @@ jobs:
 
     - name: codecov
       if: matrix.codecov
-      uses: codecov/codecov-action@v3
+      uses: codecov/codecov-action@v4
       with:
         token: ${{ secrets.CODECOV_TOKEN }}
         file: coverage.xml
@@ -240,7 +240,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
 
-    - uses: actions/setup-python@v4
+    - uses: actions/setup-python@v5
       with:
         python-version: 3.11
 
diff --git a/.github/workflows/labels.yaml b/.github/workflows/labels.yaml
index 2cac7d8e08..503be1ee03 100644
--- a/.github/workflows/labels.yaml
+++ b/.github/workflows/labels.yaml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-    - uses: actions/labeler@v3
+    - uses: actions/labeler@v5
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"
         configuration-path: ".github/pr_path_labeler.yml"
diff --git a/.github/workflows/linters.yaml b/.github/workflows/linters.yaml
index 0c7ac6d273..de5eb68fa8 100644
--- a/.github/workflows/linters.yaml
+++ b/.github/workflows/linters.yaml
@@ -31,13 +31,13 @@ jobs:
       with:
         fetch-depth: 0
 
-    - uses: actions/setup-python@v4
+    - uses: actions/setup-python@v5
       with:
         python-version: "3.10"
 
     - name: darker-main-code
       id: darker-main-code
-      uses: akaihola/darker@1.6.1
+      uses: akaihola/darker@v2.1.1
       continue-on-error: true
       with:
         version: "~=1.6.1"
@@ -48,7 +48,7 @@ jobs:
 
     - name: darker-test-code
       id: darker-test-code
-      uses: akaihola/darker@1.6.1
+      uses: akaihola/darker@v2.1.1
       continue-on-error: true
       with:
         version: "~=1.6.1"
@@ -58,7 +58,7 @@ jobs:
         lint: "flake8"
 
     - name: get-pr-info
-      uses: actions/github-script@v6
+      uses: actions/github-script@v7
       with:
         script:
             const prNumber = context.payload.number;
@@ -90,7 +90,7 @@ jobs:
       run: cat darker_results/status.json
 
     - name: upload-status
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         name: darkerlint
         path: darker_results/
@@ -104,7 +104,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
 
-    - uses: actions/setup-python@v4
+    - uses: actions/setup-python@v5
       with:
         python-version: "3.10"