diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index bd9177c7..a3e1d0e2 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -155,7 +155,7 @@ jobs:
           measure crew-orchestrator:metrics
           measure healer-agent:metrics
       - name: Vulnerability scan with Trivy
-        uses: aquasecurity/trivy-action@v0.28.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: hypercode-core:metrics
           format: 'table'
diff --git a/.github/workflows/docs-check.yml b/.github/workflows/docs-check.yml
index 8791f80c..21ea1727 100644
--- a/.github/workflows/docs-check.yml
+++ b/.github/workflows/docs-check.yml
@@ -24,7 +24,7 @@ jobs:
           fetch-depth: 0
 
       - name: Check canonical markdown links
-        uses: lycheeverse/lychee-action@v2.8.0
+        uses: lycheeverse/lychee-action@v2.9.0
         with:
           args: >-
             --verbose
diff --git a/.github/workflows/docs-lint.yml b/.github/workflows/docs-lint.yml
index 5a14347f..89735d42 100644
--- a/.github/workflows/docs-lint.yml
+++ b/.github/workflows/docs-lint.yml
@@ -22,7 +22,7 @@ jobs:
           input: '.'
 
       - name: Lychee link check
-        uses: lycheeverse/lychee-action@v2.8.0
+        uses: lycheeverse/lychee-action@v2.9.0
         with:
           args: >-
             --verbose
diff --git a/.github/workflows/iac-scan.yml b/.github/workflows/iac-scan.yml
index 365620d4..66f24621 100644
--- a/.github/workflows/iac-scan.yml
+++ b/.github/workflows/iac-scan.yml
@@ -28,7 +28,7 @@ jobs:
 
       - name: Lint all Dockerfiles
         id: hadolint
-        uses: hadolint/hadolint-action@v3.1.0
+        uses: hadolint/hadolint-action@v3.5.0
         with:
           recursive: true
           failure-threshold: error
diff --git a/.github/workflows/trivy-weekly.yml b/.github/workflows/trivy-weekly.yml
index e6673039..26b20223 100644
--- a/.github/workflows/trivy-weekly.yml
+++ b/.github/workflows/trivy-weekly.yml
@@ -94,7 +94,7 @@ jobs:
             ${{ matrix.context }}
 
       - name: Trivy scan — JSON report
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: hypercode-weekly-${{ matrix.agent }}:scan
           format: json