diff --git a/.github/workflows/advanced-metrics.yml b/.github/workflows/advanced-metrics.yml
index 81e7db268..ab3e6f57d 100644
--- a/.github/workflows/advanced-metrics.yml
+++ b/.github/workflows/advanced-metrics.yml
@@ -158,7 +158,7 @@ jobs:
         color: blue
 
     - name: Upload coverage report
-      uses: actions/upload-artifact@v4.4.3
+      uses: actions/upload-artifact@v6
       with:
         name: coverage-report
         retention-days: 30
diff --git a/.github/workflows/ci-tests.yml b/.github/workflows/ci-tests.yml
index 4e1d542b7..7fefc7fff 100644
--- a/.github/workflows/ci-tests.yml
+++ b/.github/workflows/ci-tests.yml
@@ -77,7 +77,7 @@ jobs:
       run: make build
 
     - name: Upload build artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       with:
         name: build-artifacts-${{ needs.config.outputs.package-version }}
         retention-days: 60
@@ -107,7 +107,7 @@ jobs:
         fail-on-cache-miss: false
 
     - name: Download test results
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v7
       with:
         path: test-results/
 
diff --git a/.github/workflows/dev-containers.yml b/.github/workflows/dev-containers.yml
index 1bb8f38d2..794365211 100644
--- a/.github/workflows/dev-containers.yml
+++ b/.github/workflows/dev-containers.yml
@@ -176,7 +176,7 @@ jobs:
 
     - name: Run Hadolint Dockerfile scan
       if: matrix.python-version == needs.config.outputs.default-python-version
-      uses: hadolint/hadolint-action@v3.1.0
+      uses: hadolint/hadolint-action@v3.3.0
       with:
         dockerfile: Dockerfile
         format: sarif
diff --git a/.github/workflows/dev-pypi.yml b/.github/workflows/dev-pypi.yml
index d93f5c22d..92688f899 100644
--- a/.github/workflows/dev-pypi.yml
+++ b/.github/workflows/dev-pypi.yml
@@ -139,7 +139,7 @@ jobs:
         make ci-build-sbom
 
     - name: Upload SBOM artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       with:
         name: reports-sbom-${{ needs.config.outputs.package-version }}
         path: |
diff --git a/.github/workflows/health-monitoring.yml b/.github/workflows/health-monitoring.yml
index 5d8c96471..19f0c5ab7 100644
--- a/.github/workflows/health-monitoring.yml
+++ b/.github/workflows/health-monitoring.yml
@@ -142,7 +142,7 @@ jobs:
         color: blue
 
     - name: Create health report issue
-      uses: peter-evans/create-issue-from-file@v5
+      uses: peter-evans/create-issue-from-file@v6
       with:
         title: "Weekly Health Report (${{ env.START_DATE }} to ${{ env.END_DATE }})"
         content-filepath: health-report.md
@@ -151,7 +151,7 @@ jobs:
           automated-report
 
     - name: Upload artifacts
-      uses: actions/upload-artifact@v4.4.3
+      uses: actions/upload-artifact@v6
       with:
         name: health-report-${{ env.END_DATE }}
         retention-days: 30
diff --git a/.github/workflows/reusable-test.yml b/.github/workflows/reusable-test.yml
index 9f4560b28..68306959c 100644
--- a/.github/workflows/reusable-test.yml
+++ b/.github/workflows/reusable-test.yml
@@ -85,7 +85,7 @@ jobs:
         continue-on-error: ${{ inputs.continue-on-error }}
 
       - name: Upload test results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         if: always()
         with:
           name: test-results-${{ inputs.test-type }}-${{ inputs.os }}-py${{ inputs.python-version || inputs.default-python-version }}
diff --git a/.github/workflows/security-code.yml b/.github/workflows/security-code.yml
index 2d928be1a..ede03a9fb 100644
--- a/.github/workflows/security-code.yml
+++ b/.github/workflows/security-code.yml
@@ -92,7 +92,7 @@ jobs:
         fetch-depth: 0
 
     - name: Check for secrets with TruffleHog
-      uses: trufflesecurity/trufflehog@v3.92.4
+      uses: trufflesecurity/trufflehog@v3.92.5
       with:
         path: ./
         base: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before }}
diff --git a/.github/workflows/semantic-release.yml b/.github/workflows/semantic-release.yml
index 6a234f929..cb022b693 100644
--- a/.github/workflows/semantic-release.yml
+++ b/.github/workflows/semantic-release.yml
@@ -48,7 +48,7 @@ jobs:
     steps:
       - name: Generate GitHub App Token
         id: app-token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v2
         with:
           app-id: ${{ secrets.GH_APP_ID }}
           private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/test-matrix.yml b/.github/workflows/test-matrix.yml
index 76b5d2407..914724a3e 100644
--- a/.github/workflows/test-matrix.yml
+++ b/.github/workflows/test-matrix.yml
@@ -109,7 +109,7 @@ jobs:
 
     steps:
     - name: Download all test results
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v7
       with:
         path: test-results/