diff --git a/.github/workflows/ci-contrib-connect.yml b/.github/workflows/ci-contrib-connect.yml
index 06a2ec6..aaa1c0d 100644
--- a/.github/workflows/ci-contrib-connect.yml
+++ b/.github/workflows/ci-contrib-connect.yml
@@ -18,8 +18,8 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
         with:
           go-version: "1.24"
       - run: |
diff --git a/.github/workflows/ci-contrib-goerr.yml b/.github/workflows/ci-contrib-goerr.yml
index 84dc10e..f4e47fc 100644
--- a/.github/workflows/ci-contrib-goerr.yml
+++ b/.github/workflows/ci-contrib-goerr.yml
@@ -18,8 +18,8 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
         with:
           go-version: "1.24"
       - run: |
diff --git a/.github/workflows/ci-contrib-graphql.yml b/.github/workflows/ci-contrib-graphql.yml
index dc3c04f..b49f3b6 100644
--- a/.github/workflows/ci-contrib-graphql.yml
+++ b/.github/workflows/ci-contrib-graphql.yml
@@ -18,8 +18,8 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
         with:
           go-version: "1.24"
       - run: |
diff --git a/.github/workflows/ci-contrib-grpc.yml b/.github/workflows/ci-contrib-grpc.yml
index f6f5f0f..502bc0e 100644
--- a/.github/workflows/ci-contrib-grpc.yml
+++ b/.github/workflows/ci-contrib-grpc.yml
@@ -18,8 +18,8 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
         with:
           go-version: "1.24"
       - run: |
diff --git a/.github/workflows/ci-contrib-httpx.yml b/.github/workflows/ci-contrib-httpx.yml
index 590694a..7d95343 100644
--- a/.github/workflows/ci-contrib-httpx.yml
+++ b/.github/workflows/ci-contrib-httpx.yml
@@ -18,8 +18,8 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
         with:
           go-version: "1.24"
       - run: |
diff --git a/.github/workflows/ci-contrib-otel.yml b/.github/workflows/ci-contrib-otel.yml
index 32a1264..02a1dac 100644
--- a/.github/workflows/ci-contrib-otel.yml
+++ b/.github/workflows/ci-contrib-otel.yml
@@ -18,8 +18,8 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
         with:
           go-version: "1.25" # contrib/otel tracks OpenTelemetry v1.43+ which requires Go 1.25
       - run: |
diff --git a/.github/workflows/ci-contrib-prometheus.yml b/.github/workflows/ci-contrib-prometheus.yml
index 61d0925..677a572 100644
--- a/.github/workflows/ci-contrib-prometheus.yml
+++ b/.github/workflows/ci-contrib-prometheus.yml
@@ -18,8 +18,8 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
         with:
           go-version: "1.24"
       - run: |
diff --git a/.github/workflows/ci-contrib-sentry.yml b/.github/workflows/ci-contrib-sentry.yml
index ff67925..8eb1b37 100644
--- a/.github/workflows/ci-contrib-sentry.yml
+++ b/.github/workflows/ci-contrib-sentry.yml
@@ -18,8 +18,8 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
         with:
           go-version: "1.24"
       - run: |
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4e31a9a..8df693c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,8 +17,8 @@ jobs:
       matrix:
         go: ["1.24", "1.25"]
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
         with:
           go-version: ${{ matrix.go }}
           check-latest: true
@@ -40,7 +40,7 @@ jobs:
       - name: Test (race + coverage)
         run: go test ./... -race -count=1 -coverprofile=coverage.out
       - name: Upload coverage
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v6
         with:
           files: coverage.out
           flags: core
@@ -50,11 +50,11 @@ jobs:
     name: golangci-lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
         with:
           go-version: "1.24"
           cache: false # core module is stdlib-only; no go.sum to cache
-      - uses: golangci/golangci-lint-action@v7
+      - uses: golangci/golangci-lint-action@v9
         with:
           version: latest