diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000000..5855aef6c5
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,7 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    target-branch: "devel"
diff --git a/.github/workflows/build_cc.yml b/.github/workflows/build_cc.yml
index 82a27932f6..ff3342490f 100644
--- a/.github/workflows/build_cc.yml
+++ b/.github/workflows/build_cc.yml
@@ -23,7 +23,7 @@ jobs:
     steps:
     - name: work around permission issue
       run: git config --global --add safe.directory /__w/deepmd-kit/deepmd-kit
-    - uses: actions/checkout@master
+    - uses: actions/checkout@v3
       with:
         submodules: true
     - run: apt-get update && apt-get install -y nvidia-cuda-toolkit
diff --git a/.github/workflows/build_wheel.yml b/.github/workflows/build_wheel.yml
index be01338b21..669a0219fb 100644
--- a/.github/workflows/build_wheel.yml
+++ b/.github/workflows/build_wheel.yml
@@ -39,14 +39,8 @@ jobs:
       - uses: docker/setup-qemu-action@v2
         name: Setup QEMU
         if: matrix.platform_id == 'manylinux_aarch64'
-      - uses: actions/setup-python@v2
-        name: Install Python
-        with:
-          python-version: '3.8'
-
-      - run: python -m pip install cibuildwheel==2.11.3
       - name: Build wheels
-        run: python -m cibuildwheel --output-dir wheelhouse
+        uses: pypa/cibuildwheel@v2.11.3
         env:
           CIBW_BUILD_VERBOSITY: 1
           CIBW_ARCHS: all
@@ -83,7 +77,7 @@ jobs:
         with:
           name: artifact
           path: dist
-      - uses: pypa/gh-action-pypi-publish@master
+      - uses: pypa/gh-action-pypi-publish@v4
         with:
           user: __token__
           password: ${{ secrets.pypi_password }}
diff --git a/.github/workflows/test_cc.yml b/.github/workflows/test_cc.yml
index 22d4a31a20..a6eb4727f1 100644
--- a/.github/workflows/test_cc.yml
+++ b/.github/workflows/test_cc.yml
@@ -10,7 +10,7 @@ jobs:
     steps:
     - name: work around permission issue
       run: git config --global --add safe.directory /__w/deepmd-kit/deepmd-kit
-    - uses: actions/checkout@master
+    - uses: actions/checkout@v3
     - run: source/install/test_cc_local.sh
       env:
         OMP_NUM_THREADS: 1
diff --git a/.github/workflows/test_python.yml b/.github/workflows/test_python.yml
index f65b9477fb..0d6a948de8 100644
--- a/.github/workflows/test_python.yml
+++ b/.github/workflows/test_python.yml
@@ -38,7 +38,7 @@ jobs:
     steps:
     - name: work around permission issue
       run: git config --global --add safe.directory /__w/deepmd-kit/deepmd-kit
-    - uses: actions/checkout@master
+    - uses: actions/checkout@v3
     - run: python -m pip install -U pip>=21.3.1
     - run: pip install -e .[cpu,test]
       env: