diff --git a/.github/workflows/check_libs.yaml b/.github/workflows/check_libs.yaml
index e15a2ebc..5da5e0f3 100644
--- a/.github/workflows/check_libs.yaml
+++ b/.github/workflows/check_libs.yaml
@@ -28,7 +28,7 @@ jobs:
     if: ${{ github.event.pull_request.head.repo.full_name == 'canonical/mysql-router-operators' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Check libs
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index b7a83f51..81a6b4e9 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -33,7 +33,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Install terraform
         run: |
           sudo snap install terraform --classic
@@ -54,11 +54,11 @@ jobs:
           - kubernetes
           - machines
     name: Unit test | ${{ matrix.path }}
-    runs-on: ubuntu-22.04  # TODO: use ubuntu-latest after fixing pathlib issue on python 3.12
+    runs-on: ubuntu-24.04  # TODO: use ubuntu-latest after fixing pathlib issue on python 3.12
     timeout-minutes: 20
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Install tox & poetry
         run: |
           pipx install tox
diff --git a/.github/workflows/integration_test_charm.yaml b/.github/workflows/integration_test_charm.yaml
index 914f0031..a43743d5 100644
--- a/.github/workflows/integration_test_charm.yaml
+++ b/.github/workflows/integration_test_charm.yaml
@@ -20,7 +20,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Set up environment
         run: |
           sudo snap install charmcraft --classic
@@ -79,7 +79,7 @@ jobs:
         # Default test results in case the integration tests time out or runner set up fails
         # (So that Allure report will show "unknown"/"failed" test result, instead of omitting the test)
         if: ${{ github.event_name == 'schedule' && github.run_attempt == '1' }}
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: allure-default-results-integration-test-${{ inputs.path-to-charm-directory }}
           path: ${{ inputs.path-to-charm-directory }}/allure-default-results/
@@ -109,7 +109,7 @@ jobs:
           df --human-readable
       - name: Checkout
         timeout-minutes: 3
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Set up environment
         timeout-minutes: 5
         run: |
@@ -118,7 +118,7 @@ jobs:
           go install github.com/snapcore/spread/cmd/spread@latest
       - name: Download packed charm(s)
         timeout-minutes: 5
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           pattern: ${{ inputs.artifact-prefix }}-*
           merge-multiple: true
@@ -137,7 +137,7 @@ jobs:
         # Allure can only process one result per pytest test ID. If parameterization is done via
         # spread instead of pytest, there will be overlapping pytest test IDs.
         if: ${{ (success() || (failure() && steps.spread.outcome == 'failure')) && startsWith(matrix.job.spread_job, 'github-ci:ubuntu-24.04:') && endsWith(matrix.job.spread_job, ':juju36') && github.event_name == 'schedule' && github.run_attempt == '1' }}
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: allure-results-integration-test-${{ inputs.path-to-charm-directory }}-${{ matrix.job.name_in_artifact }}
           path: ${{ inputs.path-to-charm-directory }}/artifacts/${{ matrix.job.spread_job }}/allure-results/
@@ -178,7 +178,7 @@ jobs:
       - name: Upload logs
         timeout-minutes: 5
         if: ${{ !contains(matrix.job.spread_job, 'juju29') && (success() || (failure() && steps.spread.outcome == 'failure')) }}
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: logs-integration-test-${{ inputs.path-to-charm-directory }}-${{ matrix.job.name_in_artifact }}
           path: ~/logs/
diff --git a/.github/workflows/integration_test_charms.yaml b/.github/workflows/integration_test_charms.yaml
index 0f3a44b9..d136ae0d 100644
--- a/.github/workflows/integration_test_charms.yaml
+++ b/.github/workflows/integration_test_charms.yaml
@@ -52,20 +52,20 @@ jobs:
       # git push origin gh-pages-beta
       # )
       - name: Checkout GitHub pages branch
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: gh-pages-beta
           path: repo/
       - name: Download default test results
         # Default test results in case the integration tests time out or runner set up fails
         # (So that Allure report will show "unknown"/"failed" test result, instead of omitting the test)
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           path: allure-default-results/
           pattern: allure-default-results-integration-test-*
           merge-multiple: true
       - name: Download test results
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           path: allure-results/
           pattern: allure-results-integration-test-*
diff --git a/.github/workflows/tiobe_scan.yaml b/.github/workflows/tiobe_scan.yaml
index 75a3091d..dec03696 100644
--- a/.github/workflows/tiobe_scan.yaml
+++ b/.github/workflows/tiobe_scan.yaml
@@ -18,7 +18,7 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Checkout the project
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Install system dependencies
         run: sudo apt-get update && sudo apt-get install -y python3-venv