diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8737d19ce..28dd0969e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -21,9 +21,9 @@ jobs:
         node-version: ['18', '20']
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v4
       with:
         node-version: ${{ matrix.node-version }}
     - run: npm clean-install
diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
index 8e2da5291..01bb106a7 100644
--- a/.github/workflows/codespell.yml
+++ b/.github/workflows/codespell.yml
@@ -11,8 +11,8 @@ jobs:
     name: Check for spelling errors
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: codespell-project/actions-codespell@master
+      - uses: actions/checkout@v4
+      - uses: codespell-project/actions-codespell@v2
         with:
           check_filenames: true
           skip: ./.git,./data/territory_languages.json,./data/imagery.json,./data/languages.json,./data/address_formats.json,./dist/locales,./docs/img,./dist/img,./css,package.json,package-lock.json,scripts,docs
diff --git a/.github/workflows/staging.yml b/.github/workflows/staging.yml
index 08b279b19..9a0408053 100644
--- a/.github/workflows/staging.yml
+++ b/.github/workflows/staging.yml
@@ -8,23 +8,8 @@ permissions:
   contents: read
 
 jobs:
-  checksecret:
-    name: check if deploy secret is present
-    environment: workflows
-    runs-on: ubuntu-latest
-    outputs:
-      deploy_secret_present: ${{ steps.checksecret_job.outputs.deploy_secret_present }}
-    steps:
-      - name: Check whether required secret is available
-        id: checksecret_job
-        env:
-            NETLIFY_AUTH_TOKEN: ${{secrets.NETLIFY_AUTH_TOKEN}}
-        run: |
-            echo "::set-output name=deploy_secret_present::${{ env.NETLIFY_AUTH_TOKEN != '' }}"
-
   build-deploy:
-    needs: [checksecret]
-    if: needs.checksecret.outputs.deploy_secret_present == 'true'
+    if: github.repository == 'openstreetmap/id'
     runs-on: ubuntu-latest
     environment: workflows
     steps:
diff --git a/.github/workflows/transifex.yml b/.github/workflows/transifex.yml
index 2744701cd..202221081 100644
--- a/.github/workflows/transifex.yml
+++ b/.github/workflows/transifex.yml
@@ -19,7 +19,7 @@ jobs:
     environment: workflows
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Install Transifex client
       run: |
         curl -o- https://raw.githubusercontent.com/transifex/cli/master/install.sh | bash