diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 304ee6f..24bcae4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -28,10 +28,10 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: ${{ matrix.node-version }}
           package-manager-cache: false
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index b41568d..31fdefd 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -27,10 +27,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Configure Pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@v6
 
       - name: Stage public site
         run: |
@@ -39,10 +39,10 @@ jobs:
           touch _site/.nojekyll
 
       - name: Upload case studies
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@v5
         with:
           path: _site
 
       - name: Deploy
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a4f7681..5f9b133 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -76,12 +76,12 @@ jobs:
 
     steps:
       - name: Check out release
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ needs.release-inputs.outputs.tag }}
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: "24"
           registry-url: https://registry.npmjs.org
@@ -109,7 +109,7 @@ jobs:
             --receipt .tmp/release-registry-snapshot.json
 
       - name: Preserve pre-publish registry state
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: npm-release-preflight-${{ needs.release-inputs.outputs.tag }}
           path: .tmp/release-registry-snapshot.json
@@ -168,7 +168,7 @@ jobs:
           done < .tmp/release-package-dirs.txt
 
       - name: Preserve release receipts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: npm-release-receipts-${{ needs.release-inputs.outputs.tag }}
           path: |
diff --git a/.github/workflows/verify-full.yml b/.github/workflows/verify-full.yml
index dd23f8f..c1b030c 100644
--- a/.github/workflows/verify-full.yml
+++ b/.github/workflows/verify-full.yml
@@ -35,11 +35,11 @@ jobs:
     env:
       CONTEXT_TEST_SHARD: ${{ matrix.shard }}/4
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
           persist-credentials: false
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: "24"
           package-manager-cache: false
@@ -57,7 +57,7 @@ jobs:
           bun run "$VERIFY_SCRIPT" 2>&1 | tee .tmp/verify-full.log
       - name: Preserve full verification log
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: verification-${{ inputs.full }}-${{ github.run_id }}-${{ matrix.shard }}
           path: .tmp/verify-full.log