diff --git a/.github/workflows/attentrix-macos-build.yml b/.github/workflows/attentrix-macos-build.yml
index c413d9a..08e763f 100644
--- a/.github/workflows/attentrix-macos-build.yml
+++ b/.github/workflows/attentrix-macos-build.yml
@@ -20,10 +20,10 @@ jobs:
 
     steps:
       - name: Check out the private source
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: "3.12"
           cache: pip
@@ -46,7 +46,7 @@ jobs:
           ${{ inputs.run_full_tests && '--full-tests' || '' }}
 
       - name: Upload private verification artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: attentrix-${{ github.sha }}-macos-arm64
           path: release/attentrix/*/
diff --git a/.github/workflows/public-source-checks.yml b/.github/workflows/public-source-checks.yml
index c3c1b6b..585cf2e 100644
--- a/.github/workflows/public-source-checks.yml
+++ b/.github/workflows/public-source-checks.yml
@@ -14,10 +14,10 @@ jobs:
     name: Public snapshot policy
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
           cache: pip
@@ -33,8 +33,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 45
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
           cache: pip
@@ -49,8 +49,8 @@ jobs:
     name: ATTENTRIX runtime dependency audit
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
           cache: pip
@@ -69,11 +69,11 @@ jobs:
       NEXT_PUBLIC_SITE_URL: https://www.example.com
       NEXT_TELEMETRY_DISABLED: "1"
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
+      - uses: actions/checkout@v7
+      - uses: pnpm/action-setup@v6
         with:
           version: 11.9.0
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version-file: website/.node-version
           cache: pnpm
diff --git a/.github/workflows/website-checks.yml b/.github/workflows/website-checks.yml
index eaeb8c5..72021d3 100644
--- a/.github/workflows/website-checks.yml
+++ b/.github/workflows/website-checks.yml
@@ -31,8 +31,8 @@ jobs:
   release-metadata:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
       - run: python -m pip install -e .
@@ -52,11 +52,11 @@ jobs:
       NEXT_PUBLIC_SITE_URL: https://www.example.com
       NEXT_TELEMETRY_DISABLED: "1"
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
+      - uses: actions/checkout@v7
+      - uses: pnpm/action-setup@v6
         with:
           version: 11.9.0
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version-file: website/.node-version
           cache: pnpm
@@ -71,11 +71,11 @@ jobs:
       run:
         working-directory: website
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
+      - uses: actions/checkout@v7
+      - uses: pnpm/action-setup@v6
         with:
           version: 11.9.0
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version-file: website/.node-version
           cache: pnpm