diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..619e9bd4
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+# Referenced from:
+# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
+
+version: 2
+updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/.github/workflows/perlbrew.sha256 b/.github/workflows/perlbrew.sha256
index d9992912..2623e110 100644
--- a/.github/workflows/perlbrew.sha256
+++ b/.github/workflows/perlbrew.sha256
@@ -1 +1 @@
-c3996e4fae37a0ae01839cdd73752fb7b17e81bac2a8b39712463a7d518c4945  perlbrew.sh
+8f254651d2eee188199b3355228eb67166974716081b794ca93b69c8f949c38d  perlbrew.sh
diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml
index 319cefe1..c9c32efa 100644
--- a/.github/workflows/run-tests.yml
+++ b/.github/workflows/run-tests.yml
@@ -23,7 +23,7 @@ jobs:
         perl: ["5.26.3", "5.34.1"]
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: "Install OS dependencies"
         run: |
@@ -51,7 +51,7 @@ jobs:
 
       - name: "Cache Perl"
         id: cache-perl
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ${{ env.PERL_CACHE }}
           key: ${{ runner.os }}-${{ matrix.perl }}-perl
@@ -102,7 +102,7 @@ jobs:
 
       - name: "Archive CPAN logs on failure"
         if: ${{ failure() }}
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@v4
         with:
           name: cpan_log
           path: ~/.cpanm/work/*/build.log
diff --git a/Changes b/Changes
index f30b312f..68c4cc57 100644
--- a/Changes
+++ b/Changes
@@ -1,6 +1,17 @@
 LIST OF CHANGES
 ---------------
 
+release 68.5.1 (2024-10-04)
+ - Added .github/dependabot.yml file to auto-update GitHub actions
+ - Following a release on 07/09/2024, see https://metacpan.org/dist/App-perlbrew/changes,
+   the checksum of the script served by https://install.perlbrew.pl had changed.
+   https://install.perlbrew.pl is a redirect to raw
+   https://github.com/gugod/App-perlbrew/blob/master/perlbrew-install, so
+   the change originates from GitHub and can be trusted. Our CI flow compares
+   the checksum of the downloaded script to the expected value. We now store
+   an updated expected checksum value, which corresponds to the latest release.
+ - GitHub CI - updated deprecated v2 runner to v3
+
 release 68.5.0 (2024-09-04)
  - The runfolder_path argument is added to the command for the autoqc review
    check. See https://github.com/wtsi-npg/npg_qc/pull/869