diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d98a5741..80512b33 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -9,27 +9,27 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3.5.0
+    - uses: actions/checkout@v4
     - name: Set up JDK 17 for x64
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@v4
       with:
         java-version: '17'
         distribution: 'temurin'
         architecture: x64
     - name: Setup Gradle
-      uses: gradle/gradle-build-action@v2.4.0
+      uses: gradle/actions/setup-gradle@v3
       with:
         gradle-version: 8.6
     - name: Build TASmod with Gradle
       run: gradle build
     - name: Upload Test Report
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       if: always()
       with:
         name: TestResult
         path: build/test-results/test/*.xml
     - name: Upload TASmod-Dev-Build
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         name: TASmod-Dev-Build
         path: build/libs
diff --git a/.github/workflows/buildandupload.yml b/.github/workflows/buildandupload.yml
index 16343d43..6440866e 100644
--- a/.github/workflows/buildandupload.yml
+++ b/.github/workflows/buildandupload.yml
@@ -10,21 +10,21 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository == 'MinecraftTAS/TASmod'
     steps:
-    - uses: actions/checkout@v3.5.0
+    - uses: actions/checkout@v4
     - name: Set up JDK 17 for x64
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@v4
       with:
         java-version: '17'
         distribution: 'temurin'
         architecture: x64
     - name: Setup Gradle
-      uses: gradle/gradle-build-action@v2.4.0
+      uses: gradle/actions/setup-gradle@v3
       with:
         gradle-version: 8.6
     - name: Build TASmod with Gradle
       run: gradle build
     - name: Upload artifact
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         name: TASmod-Dev-Build
         path: build/libs
diff --git a/.github/workflows/test_report.yml b/.github/workflows/test_report.yml
index b0fbbc60..11a73a88 100644
--- a/.github/workflows/test_report.yml
+++ b/.github/workflows/test_report.yml
@@ -4,11 +4,15 @@ on:
     workflows: ['Build']                     # runs after CI workflow
     types:
       - completed
+permissions:
+  contents: read
+  actions: read
+  checks: write
 jobs:
   report:
     runs-on: ubuntu-latest
     steps:
-    - uses: dorny/test-reporter@v1
+    - uses: dorny/test-reporter@v1.9.1
       with:
         artifact: TestResult
         name: TASmod Tests