diff --git a/.github/workflows/license-check.yml b/.github/workflows/license-check.yml
index 5f498e235..7e32ae9a4 100644
--- a/.github/workflows/license-check.yml
+++ b/.github/workflows/license-check.yml
@@ -17,6 +17,6 @@ jobs:
   license:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Check License Header
-        uses: apache/skywalking-eyes/header@5dfa68f93380a5e57259faaf95088b7f133b5778
+        uses: apache/skywalking-eyes/header@e9f91c35e4d4ae4420f722aa6598c4a13cc69093 # v0.8.0
diff --git a/.github/workflows/lintBuildTest.yml b/.github/workflows/lintBuildTest.yml
index f8c073f00..5d90fb8d2 100644
--- a/.github/workflows/lintBuildTest.yml
+++ b/.github/workflows/lintBuildTest.yml
@@ -14,13 +14,13 @@ jobs:
     timeout-minutes: 60
     runs-on: macos-15-xlarge
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: 'npm'
       - name: Cache node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         id: cache-node-modules
         with:
           path: node_modules
@@ -33,13 +33,13 @@ jobs:
     runs-on: macos-15-xlarge
     needs: install
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: 'npm'
       - name: Get node_modules from cache
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         id: cache-node-modules
         with:
           path: node_modules
@@ -64,13 +64,13 @@ jobs:
       matrix:
         browser: ['chrome', 'firefox', 'safari']
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: 'npm'
       - name: Get node_modules from cache
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: node_modules
           key: modules-${{ hashFiles('package-lock.json', 'patches/**') }}
@@ -80,7 +80,7 @@ jobs:
           echo "PLAYWRIGHT_VERSION=$PLAYWRIGHT_VERSION" >> $GITHUB_ENV
       # Cache browser binaries, cache key is based on Playwright version and OS
       - name: Cache Playwright browser binaries
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         id: playwright-cache
         with:
           path: '~/.cache/ms-playwright'
@@ -97,7 +97,7 @@ jobs:
         run: npx playwright install-deps
       - name: Run Playwright browser tests
         run: npx playwright test --project=${{matrix.browser}}
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: always()
         with:
           name: test-results-${{ matrix.browser }}
diff --git a/.github/workflows/upload-assets.yaml b/.github/workflows/upload-assets.yaml
index 1c275dcd0..67142f91e 100644
--- a/.github/workflows/upload-assets.yaml
+++ b/.github/workflows/upload-assets.yaml
@@ -9,17 +9,17 @@ jobs:
   build-and-upload:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: 'npm'
       - name: 'Authenticate to Google Cloud'
-        uses: 'google-github-actions/auth@v2'
+        uses: 'google-github-actions/auth@v3'
         with:
           credentials_json: '${{ secrets.GOOGLE_CLOUD_DL_SA }}'
       - name: Set up Cloud SDK
-        uses: google-github-actions/setup-gcloud@v2
+        uses: google-github-actions/setup-gcloud@v3
         with:
           project_id: oxide-downloads
       - run: npm install
@@ -36,7 +36,7 @@ jobs:
         run: sha256sum releases/console/${{ github.sha }}.tar.gz | awk '{print $1}' > releases/console/${{ github.sha }}.sha256.txt
       - name: Upload files to GCP bucket
         id: upload-files
-        uses: google-github-actions/upload-cloud-storage@v2
+        uses: google-github-actions/upload-cloud-storage@v3
         with:
           # weird combo: the path tells it where to find the files, and for some
           # reason it takes only the immediate containing folder name and sticks