diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ab5d75d8c..f03e5fbfb 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -65,7 +65,7 @@ jobs:
         if: ${{ always() && matrix.os == 'ubuntu-latest' }}
 
       - name: Upload Test Results
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         if: ${{ always() && matrix.os == 'ubuntu-latest' }}
         with:
           name: Test Reports
@@ -90,13 +90,13 @@ jobs:
         run: ./gradlew assembleDebug
 
       - name: Upload Play APK
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: Play Debug APK
           path: amethyst/build/outputs/apk/play/debug/amethyst-play-universal-debug.apk
 
       - name: Upload FDroid APK
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: FDroid Debug APK
           path: amethyst/build/outputs/apk/fdroid/debug/amethyst-fdroid-universal-debug.apk
@@ -105,19 +105,19 @@ jobs:
         run: ./gradlew assembleBenchmark
 
       - name: Upload Play APK Benchmark
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: Play Benchmark APK
           path: amethyst/build/outputs/apk/play/benchmark/amethyst-play-universal-benchmark.apk
 
       - name: Upload FDroid APK Benchmark
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: FDroid Benchmark APK
           path: amethyst/build/outputs/apk/fdroid/benchmark/amethyst-fdroid-universal-benchmark.apk
 
       - name: Upload Compose Reports
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: Compose Reports
           path: amethyst/build/compose_compiler
@@ -164,7 +164,7 @@ jobs:
         run: ./gradlew --stop
 
       - name: Upload Desktop Distribution
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ matrix.artifact-name }}
           path: ${{ matrix.artifact-path }}
diff --git a/.github/workflows/bump-homebrew.yml b/.github/workflows/bump-homebrew.yml
index 478409386..630010704 100644
--- a/.github/workflows/bump-homebrew.yml
+++ b/.github/workflows/bump-homebrew.yml
@@ -47,7 +47,7 @@ jobs:
 
       - name: Report failure
         if: failure()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const tag = context.payload.release?.tag_name || context.payload.inputs?.tag || 'unknown';
diff --git a/.github/workflows/bump-winget.yml b/.github/workflows/bump-winget.yml
index be3cc9115..61e99aace 100644
--- a/.github/workflows/bump-winget.yml
+++ b/.github/workflows/bump-winget.yml
@@ -44,7 +44,7 @@ jobs:
 
       - name: Report failure
         if: failure()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const tag = context.payload.release?.tag_name || context.payload.inputs?.tag || 'unknown';
diff --git a/.github/workflows/create-release.yml b/.github/workflows/create-release.yml
index 8b81801f2..d4abc1b4c 100644
--- a/.github/workflows/create-release.yml
+++ b/.github/workflows/create-release.yml
@@ -97,7 +97,7 @@ jobs:
           chmod +x packaging/appimage/linuxdeploy-x86_64.AppImage
 
       - name: Build desktop artifacts
-        uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08  # v3.0.2
+        uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60  # v4.0.0
         with:
           max_attempts: 2
           timeout_minutes: 15
@@ -155,7 +155,7 @@ jobs:
 
       - name: Upload to GH Release (skip on dry-run)
         if: github.event_name != 'workflow_dispatch' || github.event.inputs.dry_run != 'true'
-        uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65  # v2.6.2
+        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda  # v3.0.0
         with:
           files: dist/*
           tag_name: ${{ steps.ver.outputs.tag }}
@@ -288,7 +288,7 @@ jobs:
           fi
 
       - name: Upload Android assets to GH Release
-        uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65  # v2.6.2
+        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda  # v3.0.0
         with:
           files: dist/*
           tag_name: ${{ github.ref_name }}