diff --git a/.github/actions/go-test/action.yml b/.github/actions/go-test/action.yml
index 0e713ef..407e762 100644
--- a/.github/actions/go-test/action.yml
+++ b/.github/actions/go-test/action.yml
@@ -19,7 +19,7 @@ runs:
   using: "composite"
   steps:
     - name: Setup Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version: ${{ inputs.go-version }}
 
diff --git a/.github/actions/goreleaser/action.yml b/.github/actions/goreleaser/action.yml
index a9e3d49..9edc102 100644
--- a/.github/actions/goreleaser/action.yml
+++ b/.github/actions/goreleaser/action.yml
@@ -39,11 +39,11 @@ runs:
         fi
 
     - name: Install cosign
-      uses: sigstore/cosign-installer@v3
+      uses: sigstore/cosign-installer@v4
 
     - name: Run GoReleaser (full)
       if: inputs.mode == 'full'
-      uses: goreleaser/goreleaser-action@v6
+      uses: goreleaser/goreleaser-action@v7
       with:
         distribution: goreleaser
         version: "~> v2"
@@ -55,7 +55,7 @@ runs:
 
     - name: Run GoReleaser Pro (split)
       if: inputs.mode == 'split'
-      uses: goreleaser/goreleaser-action@v6
+      uses: goreleaser/goreleaser-action@v7
       with:
         distribution: goreleaser-pro
         version: "~> v2"
@@ -67,7 +67,7 @@ runs:
 
     - name: Run GoReleaser Pro (merge)
       if: inputs.mode == 'merge'
-      uses: goreleaser/goreleaser-action@v6
+      uses: goreleaser/goreleaser-action@v7
       with:
         distribution: goreleaser-pro
         version: "~> v2"
diff --git a/.github/actions/node-build/action.yml b/.github/actions/node-build/action.yml
index f4f644f..10ae185 100644
--- a/.github/actions/node-build/action.yml
+++ b/.github/actions/node-build/action.yml
@@ -18,7 +18,7 @@ runs:
   using: "composite"
   steps:
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ inputs.node-version }}
         cache: "npm"
diff --git a/.github/workflows/go-autoupdate.yaml b/.github/workflows/go-autoupdate.yaml
index b775264..17f9e10 100644
--- a/.github/workflows/go-autoupdate.yaml
+++ b/.github/workflows/go-autoupdate.yaml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           lfs: ${{ inputs.lfs }}
@@ -40,7 +40,7 @@ jobs:
           fi
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ${{ inputs.go-version }}
           cache: true
@@ -65,7 +65,7 @@ jobs:
       - name: Create Pull Request
         id: create-pr
         if: steps.changes.outputs.changes_detected == 'true'
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
         with:
           token: ${{ secrets.HOMEBREW_TAP_TOKEN }}
           commit-message: "Update go.mod and go.sum"
diff --git a/.github/workflows/go-pr.yaml b/.github/workflows/go-pr.yaml
index 4aa4f54..f4125de 100644
--- a/.github/workflows/go-pr.yaml
+++ b/.github/workflows/go-pr.yaml
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           lfs: ${{ inputs.lfs }}
@@ -50,7 +50,7 @@ jobs:
           fi
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ${{ inputs.go-version }}
           cache: true
@@ -69,7 +69,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           lfs: ${{ inputs.lfs }}
@@ -83,7 +83,7 @@ jobs:
           fi
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ${{ inputs.go-version }}
           cache: true
@@ -129,7 +129,7 @@ jobs:
       security-events: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           lfs: ${{ inputs.lfs }}
@@ -143,7 +143,7 @@ jobs:
           fi
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ${{ inputs.go-version }}
           cache: true
@@ -167,7 +167,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           lfs: ${{ inputs.lfs }}
@@ -181,14 +181,14 @@ jobs:
           fi
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ${{ inputs.go-version }}
           cache: true
 
       - name: Check goreleaser config
         if: hashFiles('.goreleaser.yml', '.goreleaser.yaml') != ''
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@v7
         with:
           distribution: goreleaser
           version: "~> v2"
@@ -202,7 +202,7 @@ jobs:
       security-events: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           lfs: ${{ inputs.lfs }}
 
@@ -215,7 +215,7 @@ jobs:
           fi
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ${{ inputs.go-version }}
           cache: true
@@ -238,7 +238,7 @@ jobs:
       coverage: ${{ steps.coverage.outputs.coverage }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           lfs: ${{ inputs.lfs }}
@@ -252,7 +252,7 @@ jobs:
           fi
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ${{ inputs.go-version }}
           cache: true
@@ -284,7 +284,7 @@ jobs:
     steps:
       - name: Comment coverage on PR
         if: github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const coverage = '${{ needs.test.outputs.coverage }}';
diff --git a/.github/workflows/go-release-cgo.yaml b/.github/workflows/go-release-cgo.yaml
index 6b295b4..ed268a8 100644
--- a/.github/workflows/go-release-cgo.yaml
+++ b/.github/workflows/go-release-cgo.yaml
@@ -74,7 +74,7 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: Checkout
-              uses: actions/checkout@v4
+              uses: actions/checkout@v6
               with:
                   fetch-depth: 0
                   lfs: ${{ inputs.lfs }}
@@ -99,7 +99,7 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: Checkout
-              uses: actions/checkout@v4
+              uses: actions/checkout@v6
               with:
                   lfs: ${{ inputs.lfs }}
 
@@ -112,7 +112,7 @@ jobs:
                   fi
 
             - name: Setup Node.js
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@v6
               with:
                   node-version: ${{ inputs.node-version }}
                   cache: "npm"
@@ -123,7 +123,7 @@ jobs:
               run: ${{ inputs.node-build-script }}
 
             - name: Upload frontend artifact
-              uses: actions/upload-artifact@v4
+              uses: actions/upload-artifact@v7
               with:
                   name: frontend-dist
                   path: ${{ inputs.node-output-path }}
@@ -138,7 +138,7 @@ jobs:
             version_tag: ${{ steps.semver.outputs.version_tag }}
         steps:
             - name: Checkout
-              uses: actions/checkout@v4
+              uses: actions/checkout@v6
               with:
                   fetch-depth: 0
                   lfs: ${{ inputs.lfs }}
@@ -172,7 +172,7 @@ jobs:
         runs-on: ${{ matrix.os }}
         steps:
             - name: Checkout
-              uses: actions/checkout@v4
+              uses: actions/checkout@v6
               with:
                   fetch-depth: 0
                   lfs: ${{ inputs.lfs }}
@@ -189,14 +189,14 @@ jobs:
                   fi
 
             - name: Setup Go
-              uses: actions/setup-go@v5
+              uses: actions/setup-go@v6
               with:
                   go-version: ${{ inputs.go-version }}
                   cache: true
 
             - name: Download frontend artifact
               if: inputs.node-enabled && inputs.node-embed-path != ''
-              uses: actions/download-artifact@v4
+              uses: actions/download-artifact@v8
               with:
                   name: frontend-dist
                   path: ${{ inputs.node-embed-path }}
@@ -207,7 +207,7 @@ jobs:
             # are Linux-only in the projects that consume this workflow.
             - name: Login to GitHub Container Registry
               if: matrix.goos == 'linux'
-              uses: docker/login-action@v3
+              uses: docker/login-action@v4
               with:
                   registry: ghcr.io
                   username: ${{ github.actor }}
@@ -215,7 +215,7 @@ jobs:
 
             - name: Set up Docker Buildx
               if: matrix.goos == 'linux'
-              uses: docker/setup-buildx-action@v3
+              uses: docker/setup-buildx-action@v4
               with:
                   driver-opts: image=moby/buildkit:latest
 
@@ -229,7 +229,7 @@ jobs:
                   goreleaser-key: ${{ secrets.GORELEASER_PRO }}
 
             - name: Upload artifacts
-              uses: actions/upload-artifact@v4
+              uses: actions/upload-artifact@v7
               with:
                   name: release-${{ matrix.platform }}
                   path: dist/
@@ -249,7 +249,7 @@ jobs:
             id-token: write
         steps:
             - name: Checkout
-              uses: actions/checkout@v4
+              uses: actions/checkout@v6
               with:
                   fetch-depth: 0
                   lfs: ${{ inputs.lfs }}
@@ -263,24 +263,24 @@ jobs:
                   fi
 
             - name: Setup Go
-              uses: actions/setup-go@v5
+              uses: actions/setup-go@v6
               with:
                   go-version: ${{ inputs.go-version }}
 
             - name: Set up Docker Buildx
-              uses: docker/setup-buildx-action@v3
+              uses: docker/setup-buildx-action@v4
               with:
                   driver-opts: image=moby/buildkit:latest
 
             - name: Login to GitHub Container Registry
-              uses: docker/login-action@v3
+              uses: docker/login-action@v4
               with:
                   registry: ghcr.io
                   username: ${{ github.actor }}
                   password: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Download all artifacts
-              uses: actions/download-artifact@v4
+              uses: actions/download-artifact@v8
               with:
                   path: dist
                   pattern: release-*
@@ -289,7 +289,7 @@ jobs:
             - name: Download frontend artifact
               if: inputs.node-enabled && inputs.node-output-path != ''
               continue-on-error: true
-              uses: actions/download-artifact@v4
+              uses: actions/download-artifact@v8
               with:
                   name: frontend-dist
                   path: ${{ inputs.node-output-path }}
diff --git a/.github/workflows/go-release.yaml b/.github/workflows/go-release.yaml
index 0314c87..0f7314d 100644
--- a/.github/workflows/go-release.yaml
+++ b/.github/workflows/go-release.yaml
@@ -47,7 +47,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           lfs: ${{ inputs.lfs }}
 
@@ -73,7 +73,7 @@ jobs:
       version_tag: ${{ steps.semver.outputs.version_tag }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           lfs: ${{ inputs.lfs }}
@@ -103,7 +103,7 @@ jobs:
       id-token: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           lfs: ${{ inputs.lfs }}
@@ -117,22 +117,22 @@ jobs:
           fi
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ${{ inputs.go-version }}
 
       # Docker setup (optional)
       - name: Set up QEMU
         if: inputs.docker-enabled
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx
         if: inputs.docker-enabled
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to GHCR
         if: inputs.docker-enabled
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ inputs.docker-registry }}
           username: ${{ github.actor }}