diff --git a/.github/workflows/coverity-scan.yml b/.github/workflows/coverity-scan.yaml
similarity index 100%
rename from .github/workflows/coverity-scan.yml
rename to .github/workflows/coverity-scan.yaml
diff --git a/.github/workflows/helper/appimage/export_vars.sh b/.github/workflows/helper/appimage/export_vars.sh
old mode 100644
new mode 100755
index cbedc852e..d23b2166c
--- a/.github/workflows/helper/appimage/export_vars.sh
+++ b/.github/workflows/helper/appimage/export_vars.sh
@@ -1,10 +1,12 @@
+#!/bin/sh
+
 # this file is called from AppRun so 'root_dir' will point to where AppRun is
 root_dir="$(readlink -f "$(dirname "$0")")"
 
 # Insert the default values because after the test we prepend our path
 # and it will create problems with DEs (eg KDE) that don't set the variable
 # and rely on the default paths
-if [[ -z ${XDG_DATA_DIRS} ]]; then
+if [ -z "${XDG_DATA_DIRS}" ]; then
     XDG_DATA_DIRS="/usr/local/share/:/usr/share/"
 fi
 
diff --git a/.github/workflows/check_translation_tag.py b/.github/workflows/helper/pre-commit/check_translation_tag.py
similarity index 100%
rename from .github/workflows/check_translation_tag.py
rename to .github/workflows/helper/pre-commit/check_translation_tag.py
diff --git a/.github/workflows/stale_bot.yaml b/.github/workflows/stale_bot.yaml
index 93fad6070..d5b23095f 100644
--- a/.github/workflows/stale_bot.yaml
+++ b/.github/workflows/stale_bot.yaml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Mark and close stale PRs
-        uses: actions/stale@v5
+        uses: actions/stale@v8
         with:
           stale-pr-message: "This PR is stale because it has been 60 days with no activity. This PR will be automatically closed within 7 days if there is no further activity."
           close-pr-message: "This PR was closed because it has been stalled for some time with no activity."
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 76a59ff43..b68220ef4 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -3,7 +3,7 @@ repos:
     hooks:
       - id: check-translation-tag
         name: Check newline characters in <translation> tag
-        entry: .github/workflows/check_translation_tag.py
+        entry: .github/workflows/helper/pre-commit/check_translation_tag.py
         language: script
         exclude: |
           (?x)^(
@@ -13,7 +13,7 @@ repos:
           - ts
 
   - repo: https://github.com/pre-commit/pre-commit-hooks.git
-    rev: v4.3.0
+    rev: v4.4.0
     hooks:
     - id: check-json
       name: Check JSON files