diff --git a/.github/actions/setup/action.yml b/.github/actions/setup/action.yml
index b9d2604e4..610095d38 100644
--- a/.github/actions/setup/action.yml
+++ b/.github/actions/setup/action.yml
@@ -10,7 +10,7 @@ runs:
   using: composite
   steps:
     - name: 'Handle composer cache'
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         path: |
           $HOME/.composer
@@ -22,7 +22,7 @@ runs:
           composer-${{ hashFiles('**/composer.json') }}-
           composer-
 
-    - uses: myparcelnl/actions/pull-docker-image@v3
+    - uses: myparcelnl/actions/pull-docker-image@v4
       with:
         image: 'ghcr.io/myparcelnl/php-xd:${{ inputs.php-version }}-cli-alpine'
 
diff --git a/.github/workflows/--analyse.yml b/.github/workflows/--analyse.yml
index 9bfe7ad6d..34faaf8cb 100644
--- a/.github/workflows/--analyse.yml
+++ b/.github/workflows/--analyse.yml
@@ -7,9 +7,7 @@ jobs:
   analyse:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
-
-      - uses: myparcelnl/actions/setup-git-credentials@v3
+      - uses: myparcelnl/actions/setup-git-credentials@v4
         id: credentials
         with:
           app-id: ${{ secrets.MYPARCEL_APP_ID }}
@@ -20,7 +18,7 @@ jobs:
           token: ${{ steps.credentials.outputs.token }}
 
       - name: 'Handle PHPStan cache'
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         id: phpstan-cache
         with:
           path: './.cache/phpstan'
diff --git a/.github/workflows/--quality.yml b/.github/workflows/--quality.yml
index 1adbc4894..1d138b020 100644
--- a/.github/workflows/--quality.yml
+++ b/.github/workflows/--quality.yml
@@ -13,9 +13,7 @@ jobs:
   quality:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
-
-      - uses: myparcelnl/actions/setup-git-credentials@v3
+      - uses: myparcelnl/actions/setup-git-credentials@v4
         id: credentials
         with:
           app-id: ${{ secrets.MYPARCEL_APP_ID }}
@@ -26,7 +24,7 @@ jobs:
           token: ${{ steps.credentials.outputs.token }}
 
       - name: 'Handle Rector cache'
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         id: rector-cache
         with:
           path: './.cache/rector'
diff --git a/.github/workflows/--rebase-prs.yml b/.github/workflows/--rebase-prs.yml
index dab223a5c..e0d147ff9 100644
--- a/.github/workflows/--rebase-prs.yml
+++ b/.github/workflows/--rebase-prs.yml
@@ -7,13 +7,13 @@ jobs:
   rebase-prs:
     runs-on: ubuntu-22.04
     steps:
-      - uses: myparcelnl/actions/setup-git-credentials@v3
+      - uses: myparcelnl/actions/setup-git-credentials@v4
         id: credentials
         with:
           app-id: ${{ secrets.MYPARCEL_APP_ID }}
           private-key: ${{ secrets.MYPARCEL_APP_PRIVATE_KEY }}
 
-      - uses: peter-evans/rebase@v2
+      - uses: peter-evans/rebase@v3
         with:
           token: ${{ steps.credentials.outputs.token }}
           base: ${{ github.ref_name }}
diff --git a/.github/workflows/--test-unit.yml b/.github/workflows/--test-unit.yml
index 96afd071a..c427af260 100644
--- a/.github/workflows/--test-unit.yml
+++ b/.github/workflows/--test-unit.yml
@@ -10,7 +10,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: 'Handle coverage cache'
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         id: coverage-cache
         with:
           path: ./clover.xml
@@ -36,7 +36,7 @@ jobs:
           # Strip the /app/ prefix from the coverage paths before uploading.
           sed -i 's/\/app\///g' clover.xml
 
-      - uses: codecov/codecov-action@v3
+      - uses: codecov/codecov-action@v4
         continue-on-error: true
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
diff --git a/.github/workflows/pull-request-open.yml b/.github/workflows/pull-request-open.yml
index 089d4d841..f2f6c64b3 100644
--- a/.github/workflows/pull-request-open.yml
+++ b/.github/workflows/pull-request-open.yml
@@ -13,7 +13,7 @@ jobs:
   pr-assign-author:
     runs-on: ubuntu-22.04
     steps:
-      - uses: myparcelnl/actions/pr-assign-author@v3
+      - uses: myparcelnl/actions/pr-assign-author@v4
         with:
           app-id: ${{ secrets.MYPARCEL_APP_ID }}
           private-key: ${{ secrets.MYPARCEL_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/pull-request-review.yml b/.github/workflows/pull-request-review.yml
index 72b7ac159..c52ac8ed1 100644
--- a/.github/workflows/pull-request-review.yml
+++ b/.github/workflows/pull-request-review.yml
@@ -10,7 +10,7 @@ jobs:
   pr-label:
     runs-on: ubuntu-22.04
     steps:
-      - uses: myparcelnl/actions/pr-label-by-review@v3
+      - uses: myparcelnl/actions/pr-label-by-review@v4
         with:
           app-id: ${{ secrets.MYPARCEL_APP_ID }}
           private-key: ${{ secrets.MYPARCEL_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/pull-request-title.yml b/.github/workflows/pull-request-title.yml
index 26a8bd989..82fa927d1 100644
--- a/.github/workflows/pull-request-title.yml
+++ b/.github/workflows/pull-request-title.yml
@@ -14,7 +14,7 @@ jobs:
   validate-pr-title:
     runs-on: ubuntu-22.04
     steps:
-      - uses: myparcelnl/actions/pr-validate-title-conventional@v3
+      - uses: myparcelnl/actions/pr-validate-title-conventional@v4
         with:
           app-id: ${{ secrets.MYPARCEL_APP_ID }}
           private-key: ${{ secrets.MYPARCEL_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c141a6771..5fa87ea9d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -66,28 +66,25 @@ jobs:
     outputs:
       released: ${{ steps.semantic-release.outputs.released }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: myparcelnl/actions/setup-git-credentials@v4
+        id: credentials
         with:
-          fetch-depth: 0
-          persist-credentials: false
-          token: ${{ secrets.GH_REPO_TOKEN }}
-
-      # TODO: Switch to v3 with app credentials when GitHub apps are allowed to bypass the merge queue. https://github.com/orgs/community/discussions/52652#discussioncomment-5647196
-      - uses: myparcelnl/actions/setup-git-credentials@v2
-        with:
-          token: ${{ secrets.GH_REPO_TOKEN }}
+          app-id: ${{ secrets.MYPARCEL_APP_ID }}
+          private-key: ${{ secrets.MYPARCEL_APP_PRIVATE_KEY }}
 
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          token: ${{ secrets.GH_REPO_TOKEN }}
+          token: ${{ steps.credentials.outputs.token }}
 
-      - uses: myparcelnl/actions/yarn-install@v3
+      - uses: myparcelnl/actions/yarn-install@v4
+        with:
+          node-version: ${{ vars.NODE_VERSION }}
 
-      - uses: myparcelnl/actions/semantic-release@v3
+      - uses: myparcelnl/actions/semantic-release@v4
         id: semantic-release
         with:
-          token: ${{ secrets.GH_REPO_TOKEN }}
+          token: ${{ steps.credentials.outputs.token }}
           write-summary: true
 
   rebase-prs: