diff --git a/.github/actions/setup-httpbin-server/action.yml b/.github/actions/setup-httpbin-server/action.yml
index aacdebbd9..88657b9c6 100644
--- a/.github/actions/setup-httpbin-server/action.yml
+++ b/.github/actions/setup-httpbin-server/action.yml
@@ -58,9 +58,9 @@ runs:
         password: ${{ inputs.ghcr_password }}
     - name: Setup Docker Buildx
       if: ${{ !env.ACT }}
-      uses: docker/setup-buildx-action@v2
+      uses: docker/setup-buildx-action@v3
     - name: Build httpbin-proxy image
-      uses: docker/build-push-action@v4
+      uses: docker/build-push-action@v5
       with:
         file: './assets/ci/Dockerfile.nginx'
         tags: ${{ steps.setup.outputs.tag }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a8c60493e..aaffea777 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -214,9 +214,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: 'Setup cache - rustup toolchain'
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         if: ${{ !env.ACT }}
         with:
           path: |
@@ -228,7 +228,7 @@ jobs:
         with:
           components: clippy
       - name: 'Setup cache - work/ dir'
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         if: ${{ !env.ACT }}
         with:
           path: |
diff --git a/.github/workflows/job-build-tests.yml b/.github/workflows/job-build-tests.yml
index 90dde3d6c..d003eef77 100644
--- a/.github/workflows/job-build-tests.yml
+++ b/.github/workflows/job-build-tests.yml
@@ -52,9 +52,9 @@ jobs:
         if: ${{ !env.ACT && contains(inputs.os, 'macos') }}
         run: brew install ninja openssh
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: 'Setup cache - work/ dir'
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         if: ${{ !env.ACT }}
         with:
           path: |
diff --git a/.github/workflows/job-clang-analyzer.yml b/.github/workflows/job-clang-analyzer.yml
index 7cbd76212..08d77fa64 100644
--- a/.github/workflows/job-clang-analyzer.yml
+++ b/.github/workflows/job-clang-analyzer.yml
@@ -52,9 +52,9 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y $(echo ${{ inputs.cc }} | sed s/clang/clang-tools/)
           sudo update-alternatives --install /usr/bin/scan-build scan-build /usr/bin/$(echo ${{ inputs.cc }} | sed s/clang/scan-build/) 100
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: 'Setup cache - work/ dir'
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         if: ${{ !env.ACT }}
         with:
           path: |
@@ -66,7 +66,7 @@ jobs:
         run: ./util/runtime.sh -R ${{ inputs.runtime }} -V ${{ inputs[inputs.runtime] }}
       - run: make setup
       - run: make
-      - uses: actions/upload-artifact@v2
+      - uses: actions/upload-artifact@v4
         if: ${{ failure() && !env.ACT }}
         with:
           name: ${{ github.workflow }}-${{ github.job }}-sha-${{ github.sha }}-run-${{ github.run_number }}
diff --git a/.github/workflows/job-codeql-analyzer.yml b/.github/workflows/job-codeql-analyzer.yml
index 724833866..f394ab234 100644
--- a/.github/workflows/job-codeql-analyzer.yml
+++ b/.github/workflows/job-codeql-analyzer.yml
@@ -35,14 +35,14 @@ jobs:
     outputs:
       sarif_file: ${{ steps.sarif-filename.outputs.name }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Setup CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v3
         with:
           languages: ${{ inputs.language }}
           config-file: ./.github/actions/codeql-config.yml
       - name: 'Setup cache - work/ dir'
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         if: ${{ !env.ACT }}
         with:
           path: |
@@ -55,7 +55,7 @@ jobs:
       - run: make setup
       - run: make
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v3
         with:
           upload: false
           output: sarif-results
@@ -76,11 +76,11 @@ jobs:
           input: sarif-results/${{ steps.sarif-filename.outputs.name }}.sarif
           output: sarif-results/${{ steps.sarif-filename.outputs.name }}.sarif
       - name: Upload SARIF
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: sarif-results
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
-          name: sarif-results
+          name: sarif-results-${{ inputs.runtime }}
           path: sarif-results
           retention-days: ${{ github.retention_days }}
diff --git a/.github/workflows/job-unit-tests.yml b/.github/workflows/job-unit-tests.yml
index 7d8da6a57..20aa42d49 100644
--- a/.github/workflows/job-unit-tests.yml
+++ b/.github/workflows/job-unit-tests.yml
@@ -72,10 +72,10 @@ jobs:
       - name: 'Setup deps - apt-get'
         if: ${{ contains(inputs.os, 'ubuntu') }}
         run: sudo apt-get update && sudo apt-get install -y ${CC} libstdc++-${CC#*-}-dev lcov
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: 'Setup cache - rustup toolchain'
         if: ${{ !env.ACT }}
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: |
             ~/.rustup/settings.toml
@@ -84,7 +84,7 @@ jobs:
           key: rust-toolchain-${{ inputs.os }}-${{ hashFiles('.github/**/*.yml', '.github/**/*.sh', 'rust-toolchain') }}
       - name: 'Setup cache - work/ dir'
         if: ${{ !env.ACT }}
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: |
             work/downloads
@@ -98,11 +98,11 @@ jobs:
           target: wasm32-wasi
       - name: Setup TinyGo
         if: ${{ !env.ACT }}
-        uses: acifani/setup-tinygo@v1
+        uses: acifani/setup-tinygo@v2
         with:
           tinygo-version: 0.27.0
       - name: Setup Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 20.9.0
       - name: Setup Wasm runtime
@@ -151,14 +151,14 @@ jobs:
           parallel: true
       - name: Codecov Upload
         if: ${{ !env.ACT && inputs.coverage }}
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v4
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: './lcov.info'
           flags: unit
       - run: rm -f t/servroot/html/nginx.sock
         if: ${{ failure() && !env.ACT }}
-      - uses: actions/upload-artifact@v2
+      - uses: actions/upload-artifact@v4
         if: ${{ failure() && !env.ACT }}
         with:
           name: ${{ github.workflow }}-${{ github.job }}-sha-${{ github.sha }}-run-${{ github.run_number }}-${{ inputs.runtime }}
diff --git a/.github/workflows/job-valgrind-tests.yml b/.github/workflows/job-valgrind-tests.yml
index f24361b8e..231efc1d0 100644
--- a/.github/workflows/job-valgrind-tests.yml
+++ b/.github/workflows/job-valgrind-tests.yml
@@ -71,9 +71,9 @@ jobs:
       - name: 'Setup deps - apt-get'
         if: ${{ contains(inputs.os, 'ubuntu') }}
         run: sudo apt-get update && sudo apt-get install -y valgrind ${CC} libstdc++-${CC#*-}-dev lcov
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: 'Setup cache - rustup toolchain'
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         if: ${{ !env.ACT }}
         with:
           path: |
@@ -82,7 +82,7 @@ jobs:
             ~/.rustup/update-hashes/*
           key: rust-toolchain-${{ inputs.os }}-${{ hashFiles('.github/**/*.yml', '.github/**/*.sh', 'rust-toolchain') }}
       - name: 'Setup cache - work/ dir'
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         if: ${{ !env.ACT }}
         with:
           path: |
@@ -97,11 +97,11 @@ jobs:
           target: wasm32-wasi
       - name: Setup TinyGo
         if: ${{ !env.ACT }}
-        uses: acifani/setup-tinygo@v1
+        uses: acifani/setup-tinygo@v2
         with:
           tinygo-version: 0.27.0
       - name: Setup Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 20.9.0
       - name: Setup Wasm runtime
@@ -133,14 +133,14 @@ jobs:
           lcov --gcov-tool gcov-${CC#*-} --extract lcov.info "*/ngx_wasm_module/src/*" --output-file lcov.info
       - name: Codecov Upload
         if: ${{ !env.ACT && inputs.coverage }}
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v4
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: './lcov.info'
           flags: valgrind
       - run: rm -f t/servroot/html/nginx.sock
         if: ${{ failure() && !env.ACT }}
-      - uses: actions/upload-artifact@v2
+      - uses: actions/upload-artifact@v4
         if: ${{ failure() && !env.ACT }}
         with:
           name: ${{ github.workflow }}-${{ github.job }}-sha-${{ github.sha }}-run-${{ github.run_number }}-${{ inputs.runtime }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3578ecbec..c5343de32 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -44,7 +44,7 @@ jobs:
       release_channel: ${{ steps.assign-vars.outputs.release_channel }}
       release_version: ${{ steps.assign-vars.outputs.release_version }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Assign runtime versions
         id: assign-versions
         run: |
@@ -101,11 +101,11 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Build archive
         run: ./util/release.sh ${{ needs.setup.outputs.release_name }} --src
       - name: Upload archive
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: release-artifacts
           path: dist
@@ -138,7 +138,7 @@ jobs:
             file: "./assets/release/Dockerfiles/Dockerfile.amd64.archlinux"
             tags: "ghcr.io/kong/wasmx-build-arch:latest"
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v2
         with:
@@ -148,9 +148,9 @@ jobs:
       - name: Setup QEMU
         uses: docker/setup-qemu-action@v2
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
       - name: ${{ matrix.name }}
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           file: ${{ matrix.file }}
           tags: ${{ matrix.tags }}
@@ -174,18 +174,18 @@ jobs:
         username: ${{ github.repository_owner }}
         password: ${{ secrets.TOKEN_GITHUB }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Build binary
         run: ./util/release.sh ${{ needs.setup.outputs.release_name }} --bin
         env:
           GITHUB_OAUTH_TOKEN: ${{ secrets.GH_BOT_TOKEN }}
       - name: Upload binary
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: release-artifacts
           path: dist
           retention-days: ${{ env.RETENTION_DAYS }}
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         if: failure()
         with:
           name: ${{ github.workflow }}-${{ github.job }}-sha-${{ github.sha }}-run-${{ github.run_number }}
@@ -206,18 +206,18 @@ jobs:
         username: ${{ github.repository_owner }}
         password: ${{ secrets.TOKEN_GITHUB }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Build binary
         run: ./util/release.sh ${{ needs.setup.outputs.release_name }} --bin
         env:
           GITHUB_OAUTH_TOKEN: ${{ secrets.GH_BOT_TOKEN }}
       - name: Upload binary
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: release-artifacts
           path: dist
           retention-days: ${{ env.RETENTION_DAYS }}
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         if: failure()
         with:
           name: ${{ github.workflow }}-${{ github.job }}-sha-${{ github.sha }}-run-${{ github.run_number }}
@@ -238,18 +238,18 @@ jobs:
         username: ${{ github.repository_owner }}
         password: ${{ secrets.TOKEN_GITHUB }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Build binary
         run: ./util/release.sh ${{ needs.setup.outputs.release_name }} --bin
         env:
           GITHUB_OAUTH_TOKEN: ${{ secrets.GH_BOT_TOKEN }}
       - name: Upload binary
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: release-artifacts
           path: dist
           retention-days: ${{ env.RETENTION_DAYS }}
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         if: failure()
         with:
           name: ${{ github.workflow }}-${{ github.job }}-sha-${{ github.sha }}-run-${{ github.run_number }}
@@ -261,7 +261,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 150
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Setup QEMU
         uses: docker/setup-qemu-action@v2
       - name: Login to GitHub Container Registry
@@ -284,12 +284,12 @@ jobs:
               ghcr.io/kong/wasmx-build-ubuntu:22.04 \
               /wasmx/util/release.sh ${{ needs.setup.outputs.release_name }} --bin
       - name: Upload binary
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: release-artifacts
           path: dist
           retention-days: ${{ env.RETENTION_DAYS }}
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         if: failure()
         with:
           name: ${{ github.workflow }}-${{ github.job }}-sha-${{ github.sha }}-run-${{ github.run_number }}
@@ -310,18 +310,18 @@ jobs:
         username: ${{ github.repository_owner }}
         password: ${{ secrets.TOKEN_GITHUB }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Build binary
         run: ./util/release.sh ${{ needs.setup.outputs.release_name }} --bin
         env:
           GITHUB_OAUTH_TOKEN: ${{ secrets.GH_BOT_TOKEN }}
       - name: Upload binary
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: release-artifacts
           path: dist
           retention-days: ${{ env.RETENTION_DAYS }}
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         if: failure()
         with:
           name: ${{ github.workflow }}-${{ github.job }}-sha-${{ github.sha }}-run-${{ github.run_number }}
@@ -342,18 +342,18 @@ jobs:
         username: ${{ github.repository_owner }}
         password: ${{ secrets.TOKEN_GITHUB }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Build binary
         run: ./util/release.sh ${{ needs.setup.outputs.release_name }} --bin
         env:
           GITHUB_OAUTH_TOKEN: ${{ secrets.GH_BOT_TOKEN }}
       - name: Upload binary
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: release-artifacts
           path: dist
           retention-days: ${{ env.RETENTION_DAYS }}
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         if: failure()
         with:
           name: ${{ github.workflow }}-${{ github.job }}-sha-${{ github.sha }}-run-${{ github.run_number }}
@@ -374,13 +374,13 @@ jobs:
         username: ${{ github.repository_owner }}
         password: ${{ secrets.TOKEN_GITHUB }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Build binary
         run: ./util/release.sh ${{ needs.setup.outputs.release_name }} --bin
         env:
           GITHUB_OAUTH_TOKEN: ${{ secrets.GH_BOT_TOKEN }}
       - name: Upload binary
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: release-artifacts
           path: dist
@@ -401,7 +401,7 @@ jobs:
       WASMER_VER: ${{ needs.setup.outputs.wasmer_ver }}
       V8_VER: ${{ needs.setup.outputs.v8_ver }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Setup dependencies
         run: |
           brew install ninja openssh