diff --git a/.github/workflows/backend-ci.yml b/.github/workflows/backend-ci.yml
index 13b21f9ea..ed09d2d72 100644
--- a/.github/workflows/backend-ci.yml
+++ b/.github/workflows/backend-ci.yml
@@ -24,7 +24,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.22"
+          go-version: "1.23"
           cache: true
 
       - name: Download deps
diff --git a/veza-stream-server/.github/workflows/production-deploy.yml b/veza-stream-server/.github/workflows/production-deploy.yml
index b1d443022..80e98394b 100644
--- a/veza-stream-server/.github/workflows/production-deploy.yml
+++ b/veza-stream-server/.github/workflows/production-deploy.yml
@@ -22,14 +22,12 @@ jobs:
       uses: actions/checkout@v4
 
     - name: Setup Rust
-      uses: actions-rs/toolchain@v1
+      uses: dtolnay/rust-toolchain@stable
       with:
-        toolchain: stable
         components: rustfmt, clippy
-        override: true
 
     - name: Cache dependencies
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         path: |
           ~/.cargo/registry
@@ -119,7 +117,7 @@ jobs:
         output: 'trivy-results.sarif'
 
     - name: Upload Trivy scan results
-      uses: github/codeql-action/upload-sarif@v2
+      uses: github/codeql-action/upload-sarif@v3
       with:
         sarif_file: 'trivy-results.sarif'
 
@@ -220,7 +218,7 @@ jobs:
         k6 run --out json=websocket-test-results.json tests/load/websocket-test.js
 
     - name: Upload test results
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         name: load-test-results
         path: "*-test-results.json"