diff --git a/.github/workflows/compile.yml b/.github/workflows/compile.yml
index 25df2fe18..979f8b4bc 100644
--- a/.github/workflows/compile.yml
+++ b/.github/workflows/compile.yml
@@ -33,7 +33,7 @@ jobs:
     
     steps:
     - 
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
     - 
       uses: actions/cache/restore@v4
       timeout-minutes: 1
diff --git a/.github/workflows/console.yml b/.github/workflows/console.yml
index ef781cc7a..38e75a069 100644
--- a/.github/workflows/console.yml
+++ b/.github/workflows/console.yml
@@ -27,7 +27,7 @@ jobs:
       group:  zitadel-public
     steps:
         - 
-          uses: actions/checkout@v3
+          uses: actions/checkout@v4
         - 
           uses: actions/cache/restore@v4
           timeout-minutes: 1
diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml
index a2425265f..5361d2f6b 100644
--- a/.github/workflows/container.yml
+++ b/.github/workflows/container.yml
@@ -28,11 +28,11 @@ jobs:
         arch: [amd64,arm64]
     steps:
       - 
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       -
         name: Scratch meta
         id: scratch-meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@v5
         with:
           images: ${{ inputs.build_image_name }}
           labels: ${{ env.default_labels}}
@@ -41,7 +41,7 @@ jobs:
       -
         name: Debug meta
         id: debug-meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@v5
         with:
           images: ${{ inputs.build_image_name }}
           labels: ${{ env.default_labels}}
@@ -57,7 +57,7 @@ jobs:
           driver-opts: 'image=moby/buildkit:v0.11.6'
       -
         name: Login to Docker registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -150,7 +150,7 @@ jobs:
           driver-opts: 'image=moby/buildkit:v0.11.6'
       -
         name: Login to Docker registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -158,7 +158,7 @@ jobs:
       -
         name: Docker meta
         id: build-meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@v5
         with:
           images: '${{ inputs.build_image_name }}'
           tags: |
diff --git a/.github/workflows/core-test.yml b/.github/workflows/core-test.yml
index 2076e60fa..a34fda583 100644
--- a/.github/workflows/core-test.yml
+++ b/.github/workflows/core-test.yml
@@ -38,7 +38,7 @@ jobs:
           --health-start-period 10s
     steps:
       - 
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       -
         uses: actions/setup-go@v5
         with:
@@ -109,7 +109,7 @@ jobs:
   #         --health-start-period 10s
   #   steps:
   #     - 
-  #       uses: actions/checkout@v3
+  #       uses: actions/checkout@v4
   #     -
   #       uses: actions/setup-go@v5
   #       with:
diff --git a/.github/workflows/core.yml b/.github/workflows/core.yml
index c87e0e75a..79aa6ddd1 100644
--- a/.github/workflows/core.yml
+++ b/.github/workflows/core.yml
@@ -38,7 +38,7 @@ jobs:
       cache_path: ${{ env.cache_path }}
     steps:
         - 
-          uses: actions/checkout@v3
+          uses: actions/checkout@v4
         - 
           uses: actions/cache/restore@v4
           timeout-minutes: 1
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index dab0d1865..ee49ed33c 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -14,7 +14,7 @@ jobs:
     steps:
       - 
         name: Checkout Repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       -
         uses: actions/download-artifact@v4
         with:
diff --git a/.github/workflows/issues.yml b/.github/workflows/issues.yml
index 62fd01d07..a2b56eb5a 100644
--- a/.github/workflows/issues.yml
+++ b/.github/workflows/issues.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: add issue
-        uses: actions/add-to-project@v0.5.0
+        uses: actions/add-to-project@v0.6.0
         if: ${{ github.event_name == 'issues' }}
         with:
           # You can target a repository in a different organization
@@ -28,7 +28,7 @@ jobs:
          username: ${{ github.actor }}
          GITHUB_TOKEN: ${{ secrets.ADD_TO_PROJECT_PAT }}
       - name: add pr
-        uses: actions/add-to-project@v0.5.0
+        uses: actions/add-to-project@v0.6.0
         if: ${{ github.event_name == 'pull_request_target' && github.actor != 'dependabot[bot]' && !contains(steps.checkUserMember.outputs.teams, 'engineers')}}
         with:
           # You can target a repository in a different organization
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 3aa878936..f9c926236 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -40,7 +40,7 @@ jobs:
     if: ${{ github.event_name == 'pull_request' }}
     steps:
     - 
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
     - 
       uses: bufbuild/buf-setup-action@v1
       with:
@@ -61,7 +61,7 @@ jobs:
     steps:
     -
       name: Checkout
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
     -
       uses: actions/setup-node@v4
       with:
@@ -81,7 +81,7 @@ jobs:
     steps:
     -
       name: Checkout
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
     - 
       uses: actions/setup-go@v5
       with:
diff --git a/.github/workflows/release-channels.yml b/.github/workflows/release-channels.yml
index 3693ac0eb..bc5a184bf 100644
--- a/.github/workflows/release-channels.yml
+++ b/.github/workflows/release-channels.yml
@@ -19,24 +19,24 @@ jobs:
       DOCKER_BUILDKIT: 1
     steps:
       - name: Source checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: get stable tag
         run: echo STABLE_RELEASE=$(yq eval '.stable' release-channels.yaml) >> $GITHUB_ENV
       - name: checkout stable tag
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           ref: ${{ env.STABLE_RELEASE }}
       - name: GitHub Container Registry Login
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Google Artifact Registry Login
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: europe-docker.pkg.dev
           username: _json_key_base64
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ff0f7e1a6..f3352f9d4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -39,14 +39,14 @@ jobs:
       uses: docker/setup-buildx-action@v3
     - 
       name: Login to Docker registry
-      uses: docker/login-action@v2
+      uses: docker/login-action@v3
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
     -
       name: Login to Google Artifact Registry
-      uses: docker/login-action@v2
+      uses: docker/login-action@v3
       with:
         registry: europe-docker.pkg.dev
         username: _json_key_base64
diff --git a/.github/workflows/version.yml b/.github/workflows/version.yml
index 557149bff..a3cd30465 100644
--- a/.github/workflows/version.yml
+++ b/.github/workflows/version.yml
@@ -26,9 +26,9 @@ jobs:
     steps:
     -
       name: Source checkout
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
     -
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@v4
       if: ${{ !inputs.dry_run }}
       with:
         path: .artifacts