diff --git a/.github/workflows/appspot.yaml b/.github/workflows/appspot.yaml
index 41bde04837..263148d42c 100644
--- a/.github/workflows/appspot.yaml
+++ b/.github/workflows/appspot.yaml
@@ -28,11 +28,11 @@ jobs:
 
       - uses: ./.github/workflows/custom-actions/prep-for-appspot
 
-      - uses: google-github-actions/auth@v0
+      - uses: google-github-actions/auth@v2
         with:
           credentials_json: '${{ secrets.APPENGINE_DEPLOY_KEY }}'
 
-      - uses: google-github-actions/deploy-appengine@v0
+      - uses: google-github-actions/deploy-appengine@v2
         with:
           project_id: shaka-player-demo
           version: ${{ inputs.subdomain }}
diff --git a/.github/workflows/demo-version-index.yaml b/.github/workflows/demo-version-index.yaml
index 9befe9e4d9..ca0046c02b 100644
--- a/.github/workflows/demo-version-index.yaml
+++ b/.github/workflows/demo-version-index.yaml
@@ -27,14 +27,14 @@ jobs:
           # We need a list of all tags for this, so fetch the entire history.
           fetch-depth: 0
 
-      - uses: google-github-actions/auth@v0
+      - uses: google-github-actions/auth@v2
         with:
           credentials_json: '${{ secrets.APPENGINE_DEPLOY_KEY }}'
 
       - name: Generate static content
         run: python3 app-engine/demo-version-index/generate.py
 
-      - uses: google-github-actions/deploy-appengine@v0
+      - uses: google-github-actions/deploy-appengine@v2
         with:
           project_id: shaka-player-demo
           version: index
diff --git a/.github/workflows/nightly-demo.yaml b/.github/workflows/nightly-demo.yaml
index 24263303b2..e47faa38b3 100644
--- a/.github/workflows/nightly-demo.yaml
+++ b/.github/workflows/nightly-demo.yaml
@@ -31,11 +31,11 @@ jobs:
 
       - uses: ./.github/workflows/custom-actions/prep-for-appspot
 
-      - uses: google-github-actions/auth@v0
+      - uses: google-github-actions/auth@v2
         with:
           credentials_json: '${{ secrets.APPENGINE_DEPLOY_KEY }}'
 
-      - uses: google-github-actions/deploy-appengine@v0
+      - uses: google-github-actions/deploy-appengine@v2
         with:
           project_id: shaka-player-demo
           version: nightly
diff --git a/.github/workflows/release-please.yaml b/.github/workflows/release-please.yaml
index 810a1531a8..8056e635e2 100644
--- a/.github/workflows/release-please.yaml
+++ b/.github/workflows/release-please.yaml
@@ -113,13 +113,14 @@ jobs:
           fi
 
       - run: npm pack
-      - uses: svenstaro/upload-release-action@483c1e56f95e88835747b1c7c60581215016cbf2
+      - uses: svenstaro/upload-release-action@04733e069f2d7f7f0b4aebc4fbdbce8613b03ccd # 2.9.0
         with:
           repo_token: ${{ secrets.GITHUB_TOKEN }}
           tag: ${{ needs.release.outputs.tag_name }}
           file: shaka-player-*.tgz
           file_glob: true
           overwrite: true
+          make_latest: false
 
   appspot:
     runs-on: ubuntu-latest
@@ -165,11 +166,11 @@ jobs:
 
       - uses: ./.github/workflows/custom-actions/prep-for-appspot
 
-      - uses: google-github-actions/auth@v0
+      - uses: google-github-actions/auth@v2
         with:
           credentials_json: '${{ secrets.APPENGINE_DEPLOY_KEY }}'
 
-      - uses: google-github-actions/deploy-appengine@v0
+      - uses: google-github-actions/deploy-appengine@v2
         with:
           project_id: shaka-player-demo
           version: ${{ env.APPSPOT_SUBDOMAIN }}