diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000000..5ace4600a1
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/.github/workflows/baisc_checks.yml b/.github/workflows/baisc_checks.yml
index d71276c81f..12d8fa7431 100644
--- a/.github/workflows/baisc_checks.yml
+++ b/.github/workflows/baisc_checks.yml
@@ -13,10 +13,10 @@ jobs:
   check:
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
 
       - name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v4
         with:
           go-version: 1.18
           cache: true
diff --git a/.github/workflows/common_build_upload.yml b/.github/workflows/common_build_upload.yml
index c8279f8821..0a42ef255b 100644
--- a/.github/workflows/common_build_upload.yml
+++ b/.github/workflows/common_build_upload.yml
@@ -29,7 +29,7 @@ jobs:
   build-ubuntu:
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           submodules: 'true'
           fetch-depth: '0'
@@ -163,7 +163,7 @@ jobs:
             ./${{steps.vars.outputs.repo_name}}_${{steps.vars.outputs.tag}}_ubuntu.sha256
 
       - name: upload artifacts
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@v3
         if: ${{ steps.vars.outputs.pub_method == 'pushRelease' }}
         with:
           name: ${{steps.vars.outputs.artifact_name}}
@@ -220,7 +220,7 @@ jobs:
   build-macos:
     runs-on: macos-11
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           submodules: 'true'
           fetch-depth: '0'
diff --git a/.github/workflows/common_go.yml b/.github/workflows/common_go.yml
index c98a581c84..cd9f7a30af 100644
--- a/.github/workflows/common_go.yml
+++ b/.github/workflows/common_go.yml
@@ -17,10 +17,10 @@ jobs:
   check:
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
 
       - name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v4
         with:
           go-version: 1.18
           cache: true
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index da53ca78e0..0698933424 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -16,10 +16,10 @@ jobs:
   test:
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
 
       - name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v4
         with:
           go-version: 1.18
           cache: true
@@ -65,7 +65,7 @@ jobs:
         run: go test -coverpkg=./... -coverprofile=coverage_integration.txt -covermode=atomic -timeout=30m -parallel=4   -v $(go list ./... | grep -v /venus-shared/) -integration=true -unit=false
 
       - name: Upload
-        uses: codecov/codecov-action@v2
+        uses: codecov/codecov-action@v3
         with:
           token:
           files: ./coverage_unit.txt,./coverage_integration.txt,./coverage_venus_shared.txt