diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d7aefdca8..3542af116 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,16 +17,16 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           submodules: false
       - name: Setup node
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
           node-version: 24
       - run: npm ci
       - run: npm run build-prod
-      - uses: actions/upload-artifact@v6
+      - uses: actions/upload-artifact@v7
         with:
           path: out/index.html
           retention-days: 1
@@ -36,11 +36,11 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           submodules: false
       - name: Setup node
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
           node-version: 24
       - run: npm ci
@@ -51,8 +51,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-node@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: "24"
           cache: "npm"
@@ -64,8 +64,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-node@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: "24"
           cache: "npm"
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 762f7ef2f..42b5cf28d 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -53,7 +53,7 @@ jobs:
       DOMAIN: ${{ inputs.target_domain || 'openfront.dev' }}
       SUBDOMAIN: ${{ github.event_name == 'push' && github.ref_name || inputs.target_subdomain || 'main' }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: 📝 Update job summary
         env:
           FQDN: ${{ env.SUBDOMAIN && format('{0}.{1}', env.SUBDOMAIN, env.DOMAIN) || env.DOMAIN || 'openfront.dev' }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 745d3018e..c843b1aaf 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: 🔗 Log in to Docker Hub
         uses: docker/login-action@v4
         with:
@@ -51,7 +51,7 @@ jobs:
     timeout-minutes: 30
     needs: [build]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: 🔑 Create SSH private key
         env:
           SERVER_HOST_STAGING: ${{ secrets.SERVER_HOST_STAGING }}
@@ -101,7 +101,7 @@ jobs:
     timeout-minutes: 30
     environment: prod-beta
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: 🔑 Create SSH private key
         env:
           SERVER_HOST_FALK2: ${{ secrets.SERVER_HOST_FALK2 }}
@@ -151,7 +151,7 @@ jobs:
     timeout-minutes: 30
     environment: prod-blue
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: 🔑 Create SSH private key
         env:
           SERVER_HOST_FALK2: ${{ secrets.SERVER_HOST_FALK2 }}
@@ -201,7 +201,7 @@ jobs:
     timeout-minutes: 30
     environment: prod-green
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: 🔑 Create SSH private key
         env:
           SERVER_HOST_FALK2: ${{ secrets.SERVER_HOST_FALK2 }}