diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0ef3d796dd..26ed120f21 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout App Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           repository: "stellar/stellar-docs"
 
@@ -22,7 +22,7 @@ jobs:
         uses: pnpm/action-setup@v6
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: '24'
           cache: 'pnpm'
diff --git a/.github/workflows/check-routes-removal.yml b/.github/workflows/check-routes-removal.yml
index c001e6da4a..b73782d6b1 100644
--- a/.github/workflows/check-routes-removal.yml
+++ b/.github/workflows/check-routes-removal.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -32,7 +32,7 @@ jobs:
 
       - name: Comment on PR (if routes were removed)
         if: steps.check-removal.outputs.routes_removed == 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 536b096ae8..6e326a5358 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -21,13 +21,13 @@ jobs:
 
     steps:
       - name: Checkout App Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install pnpm
         uses: pnpm/action-setup@v6
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: '24'
           cache: 'pnpm'
diff --git a/.github/workflows/socket-scan.yml b/.github/workflows/socket-scan.yml
index 46b2536f74..39dd1d60f3 100644
--- a/.github/workflows/socket-scan.yml
+++ b/.github/workflows/socket-scan.yml
@@ -37,8 +37,8 @@ jobs:
   socket-scan:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "24.18.0"
       - name: Enable Corepack (yarn/pnpm per repo packageManager)