diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5b6ba546..2390ad71 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,18 +30,21 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout current branch (full)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Setup Java (temurin@11)
         if: matrix.java == 'temurin@11'
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: 11
           cache: sbt
 
+      - name: Setup sbt
+        uses: sbt/setup-sbt@v1
+
       - name: 'Linter: Scalafix checks'
         run: sbt '++ ${{ matrix.scala }}' 'scalafixAll --check'
 
@@ -74,7 +77,7 @@ jobs:
         run: tar cf targets.tar target cli-compaction/target compaction-gcs/target backup-s3/target compaction-s3/target docs/target cli-backup/target core-restore/target restore-s3/target core-gcs/target core-compaction/target core-s3/target core-backup/target core-cli/target cli-restore/target core/target restore-gcs/target backup-gcs/target project/target
 
       - name: Upload target directories
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: target-${{ matrix.os }}-${{ matrix.scala }}-${{ matrix.java }}
           path: targets.tar
@@ -91,20 +94,23 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout current branch (full)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Setup Java (temurin@11)
         if: matrix.java == 'temurin@11'
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: 11
           cache: sbt
 
+      - name: Setup sbt
+        uses: sbt/setup-sbt@v1
+
       - name: Download target directories (2.13.13)
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           name: target-${{ matrix.os }}-2.13.13-${{ matrix.java }}
 
diff --git a/.github/workflows/clean.yml b/.github/workflows/clean.yml
index bfc865d5..4bb28c89 100644
--- a/.github/workflows/clean.yml
+++ b/.github/workflows/clean.yml
@@ -9,6 +9,9 @@ name: Clean
 
 on: push
 
+permissions:
+  actions: write
+
 jobs:
   delete-artifacts:
     name: Delete Artifacts
diff --git a/project/plugins.sbt b/project/plugins.sbt
index 1a7c4024..7e3f16ae 100644
--- a/project/plugins.sbt
+++ b/project/plugins.sbt
@@ -7,7 +7,7 @@ addSbtPlugin("com.github.sbt"                    % "sbt-ghpages"              %
 addSbtPlugin("com.thoughtworks.sbt-api-mappings" % "sbt-api-mappings"         % "3.0.2")
 addSbtPlugin("com.github.sbt"                    % "sbt-site-paradox"         % "1.7.0")
 addSbtPlugin("com.github.sbt"                    % "sbt-native-packager"      % "1.10.0")
-addSbtPlugin("com.github.sbt"                    % "sbt-github-actions"       % "0.23.0")
+addSbtPlugin("com.github.sbt"                    % "sbt-github-actions"       % "0.29.0")
 addSbtPlugin("com.github.sbt"                    % "sbt-pgp"                  % "2.2.1")
 addSbtPlugin("com.github.sbt"                    % "sbt-release"              % "1.4.0")
 addSbtPlugin("ch.epfl.scala"                     % "sbt-scalafix"             % "0.12.1")