diff --git a/.github/workflows/Build-gear-loader-network.yml b/.github/workflows/Build-gear-loader-network.yml
index 78ea2ac1f19..faf21b66875 100644
--- a/.github/workflows/Build-gear-loader-network.yml
+++ b/.github/workflows/Build-gear-loader-network.yml
@@ -21,7 +21,7 @@ jobs:
           cargo build --release --locked --package gear-node-loader
 
       - name: Archive production artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: gear-loader
           path: |
@@ -35,12 +35,12 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Download artifact
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: gear-loader
 
       - name: Run playbook
-        uses: dawidd6/action-ansible-playbook@v7
+        uses: dawidd6/action-ansible-playbook@v9
         with:
           directory: ./ansible/
           playbook: gear-loader-update.yaml
diff --git a/.github/workflows/CI-docker-gear.yml b/.github/workflows/CI-docker-gear.yml
index ebe38d2bf32..179fbabf92b 100644
--- a/.github/workflows/CI-docker-gear.yml
+++ b/.github/workflows/CI-docker-gear.yml
@@ -35,7 +35,7 @@ jobs:
         uses: actions/checkout@v6
       
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
       
       - name: Cache Docker layers
         uses: actions/cache@v5
@@ -47,7 +47,7 @@ jobs:
             ${{ runner.os }}
       
       - name: Log in to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -62,7 +62,7 @@ jobs:
           fi
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           file: ./docker/Dockerfile-release
           push: true
diff --git a/.github/workflows/CI.yaml b/.github/workflows/CI.yaml
index 4e4369fb6d5..c5f8c2df790 100644
--- a/.github/workflows/CI.yaml
+++ b/.github/workflows/CI.yaml
@@ -34,10 +34,10 @@ jobs:
       contents: write
     steps:
       - name: Download artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
 
       - name: Upload
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           prerelease: true
diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml
index 566cac1cbf3..51840fe7d6e 100644
--- a/.github/workflows/benchmarks.yml
+++ b/.github/workflows/benchmarks.yml
@@ -98,7 +98,7 @@ jobs:
         fi
 
     - name: Setup Terraform
-      uses: hashicorp/setup-terraform@v3
+      uses: hashicorp/setup-terraform@v4
 
     - name: Terraform Apply
       timeout-minutes: 30
@@ -157,7 +157,7 @@ jobs:
         id: upload-errors
         # This step will only run if the run-bench step failed
         if: ${{ failure() && steps.run-bench.conclusion == 'failure' }}
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: benchmarking-errors
           path: scripts/benchmarking/benchmarking_errors.txt
@@ -177,7 +177,7 @@ jobs:
         # This step will run if benchmarking finished with no errors (upload-errors step was skipped),
         # This runs even if baremetal patching was failed - in that case, make sure to handle it.
         if: ${{ !cancelled() && steps.upload-errors.conclusion == 'skipped'}}
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: weights-output
           path: scripts/benchmarking/weights-output
@@ -232,7 +232,7 @@ jobs:
         sparse-checkout: terraform
 
     - name: Setup Terraform
-      uses: hashicorp/setup-terraform@v3
+      uses: hashicorp/setup-terraform@v4
 
     - name: Terraform Destroy
       timeout-minutes: 60
diff --git a/.github/workflows/build-node-fuzzer.yaml b/.github/workflows/build-node-fuzzer.yaml
index 5b39d31b063..bc9c528c444 100644
--- a/.github/workflows/build-node-fuzzer.yaml
+++ b/.github/workflows/build-node-fuzzer.yaml
@@ -22,10 +22,10 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to the github container registry
         uses: docker/login-action@master
diff --git a/.github/workflows/build-unix.yml b/.github/workflows/build-unix.yml
index 2adce071da0..675b56dfa2f 100644
--- a/.github/workflows/build-unix.yml
+++ b/.github/workflows/build-unix.yml
@@ -40,7 +40,7 @@ jobs:
         run: cargo binstall --no-confirm --locked cargo-nextest
 
       - name: "ACTIONS: Download node"
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: gear-cli-and-runtime-release-${{ matrix.targets.target }}
           path: target/release
diff --git a/.github/workflows/build-windows.yml b/.github/workflows/build-windows.yml
index bb024ff514f..f12087607db 100644
--- a/.github/workflows/build-windows.yml
+++ b/.github/workflows/build-windows.yml
@@ -61,7 +61,7 @@ jobs:
           ${{ matrix.profiles.flags }}
 
       - name: "ACTIONS: Upload workspace"
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: nextest-workspace-${{ matrix.profiles.name }}-x86_64-pc-windows-msvc
           path: workspace.tar.zst
@@ -91,12 +91,12 @@ jobs:
           $tmp | Remove-Item
 
       - name: "ACTIONS: Download workspace"
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: nextest-workspace-${{ matrix.profiles.name }}-x86_64-pc-windows-msvc
 
       - name: "ACTIONS: Download node"
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: gear-cli-and-runtime-release-x86_64-pc-windows-msvc
           path: target/release
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f34cba04d9f..285b94a87f0 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -163,7 +163,7 @@ jobs:
           cp target/${{ matrix.targets.target }}/release/wbuild/vara-runtime/*.wasm artifact/wbuild/vara-runtime/
 
       - name: "ACTIONS: Upload node and VARA runtime"
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: gear-cli-and-runtime-release-${{ matrix.targets.target }}
           path: artifact
@@ -203,7 +203,7 @@ jobs:
         run: ./scripts/gear.sh build ethexe --release --locked
 
       - name: "ACTIONS: Upload ethexe node"
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: ethexe-cli-release-${{ matrix.targets.target }}
           path: target/${{ matrix.targets.target }}/release/ethexe*
@@ -298,13 +298,13 @@ jobs:
         run: cargo build --workspace --all-targets --all-features ${{ matrix.profiles.flags }}
 
       - name: "ACTIONS: Upload example WASMs"
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: examples-${{ matrix.profiles.name }}-wasm32-gear
           path: target/wasm32-gear/${{ matrix.profiles.name }}
 
       - name: "ACTIONS: Download node and runtime"
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: gear-cli-and-runtime-release-x86_64-unknown-linux-gnu
           path: gear-cli-and-runtime-release
@@ -325,7 +325,7 @@ jobs:
 
       - name: "ACTIONS: Upload junit.xml"
         if: "!cancelled()"
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: "workspace-${{ matrix.profiles.name }}-junit"
           path: target/nextest/ci/junit.xml
@@ -471,7 +471,7 @@ jobs:
     steps:
       - name: Cancel Previous Runs
         if: ${{ github.event_name == 'pull_request' }}
-        uses: styfle/cancel-workflow-action@0.13.0
+        uses: styfle/cancel-workflow-action@0.13.1
         with:
           access_token: ${{ github.token }}
 
@@ -545,7 +545,7 @@ jobs:
         uses: ./.github/actions/install-rust
 
       - name: "ACTIONS: Download example WASMs"
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: examples-release-wasm32-gear
           path: examples-artifact
@@ -587,7 +587,7 @@ jobs:
 
       - name: Upload artifacts
         if: ${{ github.event_name == 'push' }}
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           path: artifact
 
diff --git a/.github/workflows/check-node-sync.yml b/.github/workflows/check-node-sync.yml
index 792d5f5ef20..e2df8efd3be 100644
--- a/.github/workflows/check-node-sync.yml
+++ b/.github/workflows/check-node-sync.yml
@@ -49,14 +49,14 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Log in to the github container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           file: ./docker/Dockerfile
           push: true
diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index 2384577bb10..a476dbca557 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 1
 
@@ -31,7 +31,7 @@ jobs:
         run: git fetch origin ${{ github.event.pull_request.base.sha }} --depth=1
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.12"
 
@@ -40,7 +40,7 @@ jobs:
 
       - name: Restore graph cache
         id: cache-graph
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: .code-review-graph
           key: code-review-graph-${{ github.event.pull_request.base.sha }}
@@ -160,7 +160,7 @@ jobs:
           fi
 
       - name: Checkout PR branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ steps.pr.outputs.head_sha }}
           fetch-depth: 1
@@ -177,7 +177,7 @@ jobs:
             > /tmp/prev-review.md 2>/dev/null || echo "No previous review found." > /tmp/prev-review.md
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.12"
 
@@ -186,7 +186,7 @@ jobs:
 
       - name: Restore graph cache
         id: cache-graph
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: .code-review-graph
           key: code-review-graph-${{ steps.pr.outputs.base_sha }}
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index 4d26c560081..d3e88aab290 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -29,7 +29,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 1
 
diff --git a/.github/workflows/comparison-table.yml b/.github/workflows/comparison-table.yml
index bdc338d5883..b83b0a6065c 100644
--- a/.github/workflows/comparison-table.yml
+++ b/.github/workflows/comparison-table.yml
@@ -34,7 +34,7 @@ jobs:
           ./scripts/weight-diff.sh master $(git branch --show-current) ${{ inputs.runtime }} --display-units > ${{ inputs.runtime }}-tables.txt
 
       - name: "ACTIONS: Upload artifact with comparison tables (${{ inputs.runtime }})"
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ inputs.runtime }}-tables
           path: ${{ inputs.runtime }}-tables.txt
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 91fe22ab7ef..3a86261fce5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -111,7 +111,7 @@ jobs:
           sha256sum artifact/testnet_vara_runtime_v${VARA_DEV_SPEC}.wasm
 
       - name: Publish
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           files: artifact/*
           tag_name: ${{ github.event.inputs.tag_name }}
@@ -125,7 +125,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Dispatch Multiplatform Build Workflow
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           github-token: ${{ env.GITHUB_TOKEN }}
           script: |
@@ -145,7 +145,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Dispatch Docker Build Workflow
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           github-token: ${{ env.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/validation.yml b/.github/workflows/validation.yml
index 559bc18a396..c9787ebc79c 100644
--- a/.github/workflows/validation.yml
+++ b/.github/workflows/validation.yml
@@ -53,14 +53,14 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Log in to the github container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           file: ./docker/Dockerfile
           push: true