diff --git a/.github/actions/build-image/action.yml b/.github/actions/build-image/action.yml
index 8bac9e2..4c34c8e 100644
--- a/.github/actions/build-image/action.yml
+++ b/.github/actions/build-image/action.yml
@@ -48,7 +48,7 @@ runs:
   steps:
     - name: Build ${{ inputs.image }}
       id: build
-      uses: docker/build-push-action@v5
+      uses: docker/build-push-action@v7
       with:
         context: ${{ inputs.context }}
         file: ${{ inputs.file }}
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index c41fdb1..836928c 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -3,11 +3,17 @@
 
 version: 2
 updates:
-
   # Maintain dependencies for GitHub Actions
   - package-ecosystem: "github-actions"
     directories:
       - "/"
       - "/.github/actions/build-image"
     schedule:
-      interval: "daily"
+      interval: "weekly"
+    groups:
+      docker:
+        patterns:
+          - "docker/*"
+      github-actions:
+        patterns:
+          - "actions/*"
diff --git a/.github/workflows/build-images.yml b/.github/workflows/build-images.yml
index 4a9ba02..797f5a4 100644
--- a/.github/workflows/build-images.yml
+++ b/.github/workflows/build-images.yml
@@ -52,7 +52,7 @@ jobs:
       NO_CACHE: ${{ github.event_name == 'schedule' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Plan
         id: plan
@@ -82,18 +82,18 @@ jobs:
           } >> "$GITHUB_OUTPUT"
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
         with:
           driver-opts: network=host
 
       - name: Login to DockerHub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.pull-username }}
           password: ${{ secrets.pull-password }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -187,7 +187,7 @@ jobs:
 
       - name: Upload digests
         if: ${{ env.PUSH == 'ghcr' }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: digests-${{ steps.plan.outputs.tag }}-${{ matrix.arch }}
           path: ${{ runner.temp }}/digests/
diff --git a/.github/workflows/publish-images.yml b/.github/workflows/publish-images.yml
index f727624..32a70d3 100644
--- a/.github/workflows/publish-images.yml
+++ b/.github/workflows/publish-images.yml
@@ -43,7 +43,7 @@ jobs:
         exclude: ${{ fromJSON(inputs.exclude) }}
     steps:
       - name: Download digests
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           pattern: digests-${{ matrix.version }}${{ matrix.flavor }}-{amd64,arm64}
           path: ${{ runner.temp }}/digests
@@ -51,10 +51,10 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
diff --git a/.github/workflows/publish.compat.yml b/.github/workflows/publish.compat.yml
index d1b4d68..ffe5b37 100644
--- a/.github/workflows/publish.compat.yml
+++ b/.github/workflows/publish.compat.yml
@@ -24,18 +24,18 @@ jobs:
         flavor: [ '', '-apache', '-fpm' ]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
         with:
           driver-opts: network=host
 
       - name: Login to DockerHub (pull)
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_PULL_USER_4 }}
           password: ${{ secrets.DOCKER_PULL_PASS_4 }}
@@ -44,20 +44,20 @@ jobs:
         run: docker pull debian:stretch-slim
 
       - name: Login to DockerHub (push)
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build image and push to registry
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           platforms: linux/amd64,linux/arm64
 #          cache-from: type=registry,ref=ghcr.io/chialab/php-compat:${{ matrix.version }}${{ matrix.flavor }}
diff --git a/.github/workflows/test.compat.yml b/.github/workflows/test.compat.yml
index 90cbac2..8e52382 100644
--- a/.github/workflows/test.compat.yml
+++ b/.github/workflows/test.compat.yml
@@ -29,16 +29,16 @@ jobs:
           - 5000:5000
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Login to DockerHub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_PULL_USER_4 }}
           password: ${{ secrets.DOCKER_PULL_PASS_4 }}
 
       - name: Build image for testing
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
 #          cache-from: type=registry,ref=ghcr.io/chialab/php-compat:${{ matrix.version }}${{ matrix.flavor }}
           cache-to: type=inline