diff --git a/.github/workflows/heroku.yaml b/.github/workflows/heroku.yaml
index 83e2a7d69..4b4f013b9 100644
--- a/.github/workflows/heroku.yaml
+++ b/.github/workflows/heroku.yaml
@@ -3,26 +3,22 @@ name: Heroku
 
 on:
   deployment_status:
-  issue_comment:
-    types: [created, edited]
 
 jobs:
   deployment-status:
     name: Check deployment status
     runs-on: ubuntu-latest
 
-    # Continue only if some definitive status has been reported. Also allow
-    # manual refresh of status checks by commenting '/refresh-heroku-status'.
-    if: ${{ github.event.deployment_status.state != 'pending'
-      || (contains(github.event.comment.body, '/refresh-heroku-status') && github.event.issue.pull_request) }}
+    # Continue only if some definitive status has been reported.
+    if: ${{ github.event.deployment_status.state != 'pending' }}
 
     steps:
-      - uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
+      - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
       # Forward deployment's status to the deployed commit.
-      - uses: octokit/request-action@dad4362715b7fb2ddedf9772c8670824af564f0d # v2.4.0
+      - uses: octokit/request-action@b91aabaa861c777dcdb14e2387e30eddf04619ae # v3.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
@@ -38,19 +34,17 @@ jobs:
     name: Check site health
     runs-on: ubuntu-latest
 
-    # Run health check only if deployment succeeds. Also allow manual refresh
-    # of status checks by commenting '/refresh-heroku-status'.
-    if: ${{ github.event.deployment_status.state == 'success'
-      || (contains(github.event.comment.body, '/refresh-heroku-status') && github.event.issue.pull_request) }}
+    # Run health check only if deployment succeeds.
+    if: ${{ github.event.deployment_status.state == 'success' }}
 
     # Check that the deployed app returns successful HTTP response.
     steps:
-      - uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
+      - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
       - id: health_check
-        uses: jtalk/url-health-check-action@b716ccb6645355dd9fcce8002ce460e5474f7f00 # v4
+        uses: jtalk/url-health-check-action@e7d5ebdc9027fbf494d2d034f3e8fc78f8b7a2b9 # v5
         with:
           url: ${{ github.event.deployment.payload.web_url }}
           follow-redirect: true
@@ -58,7 +52,7 @@ jobs:
           retry-delay: 30s
         continue-on-error: true
       # Set appropriate status to the deployed commit.
-      - uses: octokit/request-action@dad4362715b7fb2ddedf9772c8670824af564f0d # v2.4.0
+      - uses: octokit/request-action@b91aabaa861c777dcdb14e2387e30eddf04619ae # v3.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with: