diff --git a/.github/workflows/binary-release.yml b/.github/workflows/binary-release.yml
index ec47dfa1..8e1c4c7a 100644
--- a/.github/workflows/binary-release.yml
+++ b/.github/workflows/binary-release.yml
@@ -8,9 +8,9 @@ on:
 
 jobs:
   audioserve-build:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
     - name: Build image
       run: docker build --tag izderadicka/audioserve .
     - name: Publish image
@@ -18,10 +18,10 @@ jobs:
         docker login -u ${{secrets.DOCKERHUB_USER}} -p ${{secrets.DOCKERHUB_PASSWORD}}
         docker push izderadicka/audioserve
   build-static:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     needs: audioserve-build
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: Build static Binary
         run: |
           ./build_static.sh
diff --git a/.github/workflows/build_dev_image.yml b/.github/workflows/build_dev_image.yml
index 76e6ca45..d4ac4fd2 100644
--- a/.github/workflows/build_dev_image.yml
+++ b/.github/workflows/build_dev_image.yml
@@ -10,7 +10,7 @@ jobs:
     outputs:
       should_run: ${{ steps.should_run.outputs.should_run }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: print latest_commit
         run: echo ${{ github.sha }}
 
@@ -20,7 +20,7 @@ jobs:
         if: ${{ github.event_name == 'schedule' }}
         run: test -z $(git rev-list  --after="24 hours"  ${{ github.sha }}) && echo "::set-output name=should_run::false"
   audioserve-build:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     needs: check_date
     if: ${{ needs.check_date.outputs.should_run != 'false' }}
     steps:
@@ -28,7 +28,7 @@ jobs:
       run: |
         echo "Starting build"
         docker --version
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
     - name: Build image
       run: docker build --tag izderadicka/audioserve:unstable --build-arg CARGO_ARGS="--features=transcoding-cache,collation" .
     - name: Publish image
diff --git a/.github/workflows/build_experimental_image.yml b/.github/workflows/build_experimental_image.yml
index b49ee729..e32ebf55 100644
--- a/.github/workflows/build_experimental_image.yml
+++ b/.github/workflows/build_experimental_image.yml
@@ -3,9 +3,9 @@ on:
   workflow_dispatch:
 jobs:
    audioserve-build:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
     - name: Build image
       run: docker build --tag izderadicka/audioserve:experimental --build-arg CARGO_ARGS="--features=collation" --build-arg CARGO_RELEASE= .
     - name: Publish image
diff --git a/.github/workflows/rust_check.yml b/.github/workflows/rust_check.yml
index 9d2908a0..a4309df5 100644
--- a/.github/workflows/rust_check.yml
+++ b/.github/workflows/rust_check.yml
@@ -10,9 +10,9 @@ env:
 jobs:
   build:
 
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
     - uses: Swatinem/rust-cache@v2
     - name: Check formatting
       run: |
diff --git a/Cargo.toml b/Cargo.toml
index 1899ab33..a8e6f9e9 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -10,7 +10,7 @@ members = ["crates/*"]
 
 [dependencies]
 
-bytes = "1.4"
+bytes = "1.5"
 env_logger = "0.10"
 log = {version="0.4", features = ["release_max_level_info", "max_level_trace"]}
 hyper = {version="0.14", features = ["full"]}
diff --git a/crates/async-tar/Cargo.toml b/crates/async-tar/Cargo.toml
index 5c994bb1..c6bd2344 100644
--- a/crates/async-tar/Cargo.toml
+++ b/crates/async-tar/Cargo.toml
@@ -11,7 +11,7 @@ tokio={version="1.32", features=["fs"]}
 
 [dev-dependencies]
 tempfile="3.8"
-bytes = "1.4"
+bytes = "1.5"
 tokio-util = {version="0.7", features=["codec"]}
 tokio={version="1.32", features=["macros", "rt"]}
 
diff --git a/crates/async-zip/Cargo.toml b/crates/async-zip/Cargo.toml
index 68a6ad54..3ac6a0a9 100644
--- a/crates/async-zip/Cargo.toml
+++ b/crates/async-zip/Cargo.toml
@@ -9,7 +9,7 @@ edition = "2021"
 [dependencies]
 futures = "0.3"
 tokio = {version="1.32", features=["full"]}
-bytes = "1.4"
+bytes = "1.5"
 chrono = "0.4"
 thiserror = "1.0"
 crc32fast = "1.3"