diff --git a/.github/workflows/helm-publish.yaml b/.github/workflows/helm-publish.yaml
index 226acae..5f98451 100644
--- a/.github/workflows/helm-publish.yaml
+++ b/.github/workflows/helm-publish.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -28,6 +28,6 @@ jobs:
           GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
 
       - name: Run chart-releaser
-        uses: helm/chart-releaser-action@v1.6.0
+        uses: helm/chart-releaser-action@v1.7.0
         env:
           CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
diff --git a/.github/workflows/helm-test.yaml b/.github/workflows/helm-test.yaml
index 2fcf894..581cfa7 100644
--- a/.github/workflows/helm-test.yaml
+++ b/.github/workflows/helm-test.yaml
@@ -6,12 +6,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout Code
-      uses: actions/checkout@v2
+      uses: actions/checkout@v6
 
     - name: Install Go
-      uses: actions/setup-go@v2
+      uses: actions/setup-go@v6
       with:
-        go-version: 1.22
+        go-version-file: 'go.mod'
 
     - name: Install Tools
       shell: bash
@@ -67,7 +67,7 @@ jobs:
 
     - name: Upload Tilt Snapshot
       if: success() || failure()
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v6
       with:
         name: tilt-snapshot
         path: |
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index c271fe2..e20e935 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -15,9 +15,9 @@ jobs:
       packages: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v6
         with:
           go-version-file: 'go.mod'
 
@@ -45,7 +45,6 @@ jobs:
         uses: docker/setup-qemu-action@v3
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
-
       - name: Docker meta
         id: meta
         uses: docker/metadata-action@v5
@@ -63,13 +62,13 @@ jobs:
             org.opencontainers.image.vendor=${{ github.repository_owner }}
 
       - name: Build regular image
-        uses: docker/bake-action@v4
+        uses: docker/bake-action@v6
         with:
           targets: ci
           push: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
           files: |
             ./docker-bake.hcl
-            ${{ steps.meta.outputs.bake-file }}
+            cwd://${{ steps.meta.outputs.bake-file }}
 
       # https://github.com/docker/buildx/issues/2105
       - name: Create manifest
diff --git a/.gitignore b/.gitignore
index cf81c1b..ff94c47 100644
--- a/.gitignore
+++ b/.gitignore
@@ -91,3 +91,4 @@ ENV/
 # Rope project settings
 .ropeproject
 
+.secrets