diff --git a/.github/workflows/agent-checks.yml b/.github/workflows/agent-checks.yml
index f5ff4f5..44311df 100644
--- a/.github/workflows/agent-checks.yml
+++ b/.github/workflows/agent-checks.yml
@@ -9,10 +9,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Python 3.11
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.11'
 
@@ -45,7 +45,7 @@ jobs:
 
       - name: Upload agent reports
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: agent-check-reports
           path: docs/reports/
@@ -55,10 +55,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Node.js 22
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '22'
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1b2d4ab..af8f0fb 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,15 +9,15 @@ jobs:
   industrial-validation:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Set up Python 3.11
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.11'
 
       - name: Set up Node.js 22
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '22'
 
@@ -37,7 +37,7 @@ jobs:
 
       - name: Upload paper replay artifact
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: paper-replay-results
           path: artifacts/paper_replay_results.json
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a4d626a..c19d9e9 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -26,13 +26,13 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           build-mode: none
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
diff --git a/.github/workflows/validation_runner.yml b/.github/workflows/validation_runner.yml
index c14d363..347f9bb 100644
--- a/.github/workflows/validation_runner.yml
+++ b/.github/workflows/validation_runner.yml
@@ -39,7 +39,7 @@ jobs:
 
       - name: Checkout repository
         id: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         continue-on-error: true
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
@@ -47,7 +47,7 @@ jobs:
 
       - name: Set up Python 3.11
         id: setup_python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         continue-on-error: true
         with:
           python-version: '3.11'
@@ -58,7 +58,7 @@ jobs:
         run: python -m py_compile scripts/publish_hash_chilli_ci_artifacts.py
 
       - name: Set up Node.js 22
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: "22"
 
@@ -183,7 +183,7 @@ jobs:
 
       - name: Upload CFI-03 Hash/chilli CI artifacts
         if: always() && hashFiles(env.CFI_RESULT_PATH) != ''
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: validation-runner-cfi-artifacts
           path: |