diff --git a/.env b/.env
index 4a7e37cccc..f6804a840c 100644
--- a/.env
+++ b/.env
@@ -12,7 +12,7 @@ GRAFANA_IMAGE=grafana/grafana:11.2.0
 JAEGERTRACING_IMAGE=jaegertracing/all-in-one:1.60
 # must also update version field in ./src/grafana/provisioning/datasources/opensearch.yaml
 OPENSEARCH_IMAGE=opensearchproject/opensearch:2.16.0
-POSTGRES_IMAGE=postgres:16.4
+POSTGRES_IMAGE=postgres:17.0
 PROMETHEUS_IMAGE=quay.io/prometheus/prometheus:v2.54.1
 VALKEY_IMAGE=valkey/valkey:8.0-alpine
 # must also update the version arg in ./test/tracetesting/Dockerfile
diff --git a/.github/workflows/component_build-images-elastic.yml b/.github/workflows/component_build-images-elastic.yml
index 84b2761db9..5023297e04 100644
--- a/.github/workflows/component_build-images-elastic.yml
+++ b/.github/workflows/component_build-images-elastic.yml
@@ -145,7 +145,7 @@ jobs:
             max-parallelism = 2
       - name: Matrix Build and push demo images
         if: steps.check_changes.outputs.skip == 'false'
-        uses: docker/build-push-action@v5.0.0
+        uses: docker/build-push-action@v6.9.0
         with:
           context: ${{ matrix.file_tag.context }}
           file: ${{ matrix.file_tag.file }}
diff --git a/.github/workflows/label-pr.yml b/.github/workflows/label-pr.yml
index e027769190..98b0e6800e 100644
--- a/.github/workflows/label-pr.yml
+++ b/.github/workflows/label-pr.yml
@@ -15,11 +15,11 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Check for changed files
         id: file_changes
-        uses: dorny/paths-filter@v2
+        uses: dorny/paths-filter@v3
         with:
           list-files: shell
           filters: |
diff --git a/.github/workflows/merge-upstream.yaml b/.github/workflows/merge-upstream.yaml
index cbe0d88047..a3a22a4dff 100644
--- a/.github/workflows/merge-upstream.yaml
+++ b/.github/workflows/merge-upstream.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           ref: main
           fetch-depth: 0
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 8b7a1dfd80..ef7516d8a2 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -12,7 +12,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v8
+      - uses: actions/stale@v9
         with:
           stale-pr-message: 'This PR was marked stale due to lack of activity. It will be closed in 7 days.'
           close-pr-message: 'Closed as inactive. Feel free to reopen if this PR is still being worked on.'