diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml
index ab9fafd4..c591555c 100644
--- a/.github/workflows/cifuzz.yml
+++ b/.github/workflows/cifuzz.yml
@@ -26,14 +26,14 @@ jobs:
         fuzz-seconds: 600
         output-sarif: true
     - name: Upload Crash
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       if: failure() && steps.build.outcome == 'success'
       with:
         name: artifacts
         path: ./out/artifacts
     - name: Upload Sarif
       if: always() && steps.build.outcome == 'success'
-      uses: github/codeql-action/upload-sarif@v2
+      uses: github/codeql-action/upload-sarif@v3
       with:
         # Path to SARIF file relative to the root of the repository
         sarif_file: cifuzz-sarif/results.sarif
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 08894acb..ae8bee27 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -50,7 +50,7 @@ jobs:
     - run: |
         lcov --capture --directory . --output-file coverage.info --no-external
 
-    - uses: codecov/codecov-action@v3
+    - uses: codecov/codecov-action@v4
       with:
         fail_ci_if_error: true
         files: ./coverage.info
diff --git a/.github/workflows/lock.yml b/.github/workflows/lock.yml
index e4dde4ba..533318a4 100644
--- a/.github/workflows/lock.yml
+++ b/.github/workflows/lock.yml
@@ -10,7 +10,7 @@ permissions:
   pull-requests: write
 
 concurrency:
-  group: lock
+  group: lock-threads
 
 jobs:
   action: