diff --git a/.github/actions/copy-workflow-go/action.yml b/.github/actions/copy-workflow-go/action.yml
index e31ed08d..4356430a 100644
--- a/.github/actions/copy-workflow-go/action.yml
+++ b/.github/actions/copy-workflow-go/action.yml
@@ -4,7 +4,7 @@ description: Copy workflow steps specific to go
 runs:
   using: "composite"
   steps:
-    - uses: actions/setup-go@v2
+    - uses: actions/setup-go@v3
       with:
         # This should be the same Go version we use in the go-check workflow.
         # go mod tidy, go vet, staticcheck and gofmt might behave differently depending on the version.
diff --git a/.github/workflows/automerge.yml b/.github/workflows/automerge.yml
index 1a5cd12d..c24662ca 100644
--- a/.github/workflows/automerge.yml
+++ b/.github/workflows/automerge.yml
@@ -16,7 +16,7 @@ jobs:
     outputs:
       status: ${{ steps.should-automerge.outputs.status }}
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
       with:
         fetch-depth: 0
     - name: Check if we should automerge
diff --git a/.github/workflows/check-3rd-party.yml b/.github/workflows/check-3rd-party.yml
index 339793df..36203b6a 100644
--- a/.github/workflows/check-3rd-party.yml
+++ b/.github/workflows/check-3rd-party.yml
@@ -1,4 +1,4 @@
-on: 
+on:
   pull_request:
     paths-ignore:
       - 'configs/*.json'
@@ -11,7 +11,7 @@ jobs:
     outputs:
       targets: ${{ steps.set-matrix.outputs.targets }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - id: set-matrix
         run: |
           TARGETS=$(find . -type f -name "*.yml" | sed "s|^\./||" | grep -v workflow-templates/header.yml | jq -R -s -c 'split("\n")[:-1]')
@@ -25,6 +25,6 @@ jobs:
         file: ${{ fromJson(needs.matrix.outputs.targets) }}
     name: ${{ matrix.file }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: Run check
         run: .github/workflows/check-3rd-party.sh ${{ matrix.file }}
diff --git a/.github/workflows/check-config.yml b/.github/workflows/check-config.yml
index 1ee8aab6..db30405f 100644
--- a/.github/workflows/check-config.yml
+++ b/.github/workflows/check-config.yml
@@ -9,7 +9,7 @@ jobs:
   check-config:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: check if config files are sorted alphabetically
         run: |
           for config in configs/*.json; do
diff --git a/.github/workflows/check-yaml.yml b/.github/workflows/check-yaml.yml
index 5442b6ed..890a8e3d 100644
--- a/.github/workflows/check-yaml.yml
+++ b/.github/workflows/check-yaml.yml
@@ -12,7 +12,7 @@ jobs:
   check-yaml:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: nwisbeta/validate-yaml-schema@c3734e647d2a3beb98b9132330067e900fdbd1a2 # v2.0.0
         with:
           yamlSchemasJson: |
diff --git a/.github/workflows/copy-workflow.yml b/.github/workflows/copy-workflow.yml
index 235beed0..cced762a 100644
--- a/.github/workflows/copy-workflow.yml
+++ b/.github/workflows/copy-workflow.yml
@@ -28,7 +28,7 @@ jobs:
     name: ${{ matrix.cfg.target }}
     steps:
     - name: Checkout ${{ matrix.cfg.target }}
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
       with:
         path: ${{ env.TARGET_REPO_DIR }}
         repository: ${{ matrix.cfg.target }}
@@ -36,7 +36,7 @@ jobs:
         persist-credentials: true
         submodules: recursive
     - name: Checkout template repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
       with:
         path: ${{ env.TEMPLATE_REPO_DIR }}
     - name: determine GitHub default branch
diff --git a/.github/workflows/create-prs.yml b/.github/workflows/create-prs.yml
index 688100d7..01c96d15 100644
--- a/.github/workflows/create-prs.yml
+++ b/.github/workflows/create-prs.yml
@@ -14,7 +14,7 @@ jobs:
     env:
       GITHUB_TOKEN: ${{ secrets.WEB3BOT_GITHUB_TOKEN }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.workflow_run.head_commit.id || github.sha }}
       - name: Sync PRs in targets that need it
diff --git a/.github/workflows/dispatch.yml b/.github/workflows/dispatch.yml
index 0c2d579b..8cd1c72d 100644
--- a/.github/workflows/dispatch.yml
+++ b/.github/workflows/dispatch.yml
@@ -28,7 +28,7 @@ jobs:
     outputs:
       batches: ${{ steps.set-matrix.outputs.batches }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - id: set-matrix
         run: |
           targets=()
diff --git a/.github/workflows/release-check.yml b/.github/workflows/release-check.yml
index 0d65969e..5b2e63bc 100644
--- a/.github/workflows/release-check.yml
+++ b/.github/workflows/release-check.yml
@@ -17,8 +17,8 @@ jobs:
       GOMODDIFF: ""
       RELEASE_BRANCH_NOTE: ""
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-go@v2
+      - uses: actions/checkout@v3
+      - uses: actions/setup-go@v3
         with:
           go-version: "1.19.x"
       - name: Determine version
diff --git a/.github/workflows/releaser.yml b/.github/workflows/releaser.yml
index 9a981c22..7c27f737 100644
--- a/.github/workflows/releaser.yml
+++ b/.github/workflows/releaser.yml
@@ -9,7 +9,7 @@ jobs:
       CREATETAG: "false"
       DEFAULT_BRANCH: ""
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: Determine version
         run: echo "VERSION=$(jq -r .version version.json)" >> $GITHUB_ENV
       - name: Determine branch
diff --git a/.github/workflows/stale-repos.yml b/.github/workflows/stale-repos.yml
index c70a42df..c7889423 100644
--- a/.github/workflows/stale-repos.yml
+++ b/.github/workflows/stale-repos.yml
@@ -7,7 +7,7 @@ jobs:
     name: Find stale repositories
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: find deleted / archived repositories
         run: |
           status=0
diff --git a/.github/workflows/tagpush.yml b/.github/workflows/tagpush.yml
index 0375f35d..f295aacf 100644
--- a/.github/workflows/tagpush.yml
+++ b/.github/workflows/tagpush.yml
@@ -16,7 +16,7 @@ jobs:
     env:
       TAGNAME: ""
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - run: cat "$GITHUB_EVENT_PATH" | jq -M .
       - name: extract tag name
         run: |
diff --git a/templates/.github/workflows/go-check.yml b/templates/.github/workflows/go-check.yml
index 0aed3e52..22d23a45 100644
--- a/templates/.github/workflows/go-check.yml
+++ b/templates/.github/workflows/go-check.yml
@@ -8,10 +8,10 @@ jobs:
     env:
       RUNGOGENERATE: false
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           submodules: recursive
-      - uses: actions/setup-go@v2
+      - uses: actions/setup-go@v3
         with:
           go-version: "1.19.x"
       - name: Run repo-specific setup
diff --git a/templates/.github/workflows/go-test.yml b/templates/.github/workflows/go-test.yml
index 2daa91a8..10307176 100644
--- a/templates/.github/workflows/go-test.yml
+++ b/templates/.github/workflows/go-test.yml
@@ -13,10 +13,10 @@ jobs:
     runs-on: ${{ format('{0}-latest', matrix.os) }}
     name: ${{ matrix.os }} (go ${{ matrix.go }})
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           submodules: recursive
-      - uses: actions/setup-go@v2
+      - uses: actions/setup-go@v3
         with:
           go-version: ${{ matrix.go }}
       - name: Go information
diff --git a/templates/.github/workflows/js-test-and-release.yml b/templates/.github/workflows/js-test-and-release.yml
index 05ac5920..44d92db3 100644
--- a/templates/.github/workflows/js-test-and-release.yml
+++ b/templates/.github/workflows/js-test-and-release.yml
@@ -12,7 +12,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - uses: actions/setup-node@v2
       with:
         node-version: lts/*
@@ -29,7 +29,7 @@ jobs:
         node: [16]
       fail-fast: true
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-node@v2
         with:
           node-version: ${{ matrix.node }}
@@ -43,7 +43,7 @@ jobs:
     needs: check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-node@v2
         with:
           node-version: lts/*
@@ -57,7 +57,7 @@ jobs:
     needs: check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-node@v2
         with:
           node-version: lts/*
@@ -71,7 +71,7 @@ jobs:
     needs: check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-node@v2
         with:
           node-version: lts/*
@@ -85,7 +85,7 @@ jobs:
     needs: check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-node@v2
         with:
           node-version: lts/*
@@ -99,7 +99,7 @@ jobs:
     needs: check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-node@v2
         with:
           node-version: lts/*
@@ -113,7 +113,7 @@ jobs:
     needs: check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-node@v2
         with:
           node-version: lts/*
@@ -128,7 +128,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && github.ref == 'refs/heads/$default-branch' # with #262 - 'refs/heads/${{{ github.default_branch }}}'
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           fetch-depth: 0
       - uses: actions/setup-node@v2