diff --git a/.github/workflows/upstream-check.yml b/.github/workflows/upstream-check.yml
index 5fd5624..480b39b 100644
--- a/.github/workflows/upstream-check.yml
+++ b/.github/workflows/upstream-check.yml
@@ -30,7 +30,7 @@ jobs:
 
         if: github.event.pull_request.draft == false
         steps:
-            -   uses: actions/checkout@v3
+            -   uses: actions/checkout@v4
                 with:
                     repository: ${{ matrix.repo }}
                     ref: ${{ matrix.branch }}
@@ -47,13 +47,13 @@ jobs:
             -   name: allow php-cs-fixer version required by redaxo/php-cs-fixer-config
                 run: composer require friendsofphp/php-cs-fixer:\* --no-scripts --no-update --dev
   
-            -   uses: ramsey/composer-install@v2
+            -   uses: ramsey/composer-install@v3
                 if: hashFiles('composer.lock') != ''
                 with:
                     dependency-versions: 'highest' # to trigger 'composer update' instead of 'composer install' but limited to redaxo/php-cs-fixer-config updates only
                     composer-options: 'redaxo/php-cs-fixer-config --prefer-dist --no-progress --with-all-dependencies'
   
-            -   uses: ramsey/composer-install@v2
+            -   uses: ramsey/composer-install@v3
                 if: hashFiles('composer.lock') == ''
                 with:
                     dependency-versions: 'highest' # to trigger 'composer update'