diff --git a/.github/workflows/ghost.yml b/.github/workflows/ghost.yml
index 7398f62..4cb82d2 100644
--- a/.github/workflows/ghost.yml
+++ b/.github/workflows/ghost.yml
@@ -101,7 +101,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: clippy
-      - uses: Mozilla-Actions/sccache-action@v0.0.9
+      - uses: Mozilla-Actions/sccache-action@v0.0.10
       - uses: taiki-e/install-action@cargo-nextest
 
       # ── Cache Cargo registry for test job ──
@@ -225,7 +225,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@stable
         with:
           targets: ${{ matrix.target }}
-      - uses: Mozilla-Actions/sccache-action@v0.0.9
+      - uses: Mozilla-Actions/sccache-action@v0.0.10
 
       # ── Cache Cargo registry (avoids re-downloading crate metadata) ──
       - name: Cache Cargo registry
@@ -352,7 +352,7 @@ jobs:
 
       # ── Android SDK + NDK ──
       - name: Setup Android SDK
-        uses: android-actions/setup-android@v3
+        uses: android-actions/setup-android@v4
 
       - name: Install Android SDK packages
         run: |
@@ -368,7 +368,7 @@ jobs:
         with:
           targets: aarch64-linux-android
 
-      - uses: Mozilla-Actions/sccache-action@v0.0.9
+      - uses: Mozilla-Actions/sccache-action@v0.0.10
 
       # ── Gradle + Cargo registry cache ──
       - name: Cache Gradle & Cargo registry
@@ -443,7 +443,7 @@ jobs:
           gh release upload "$TAG" "$DEST" --clobber
 
       - name: Upload workflow artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         if: always()
         with:
           name: ghost-android-aarch64
@@ -498,7 +498,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@stable
         with:
           targets: aarch64-apple-ios
-      - uses: Mozilla-Actions/sccache-action@v0.0.9
+      - uses: Mozilla-Actions/sccache-action@v0.0.10
 
       # ── Bun + frontend ──
       - uses: oven-sh/setup-bun@v2
@@ -652,7 +652,7 @@ jobs:
 
       # ── Upload xcarchive as workflow artifact too ──
       - name: Upload workflow artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         if: always()
         with:
           name: ghost-ios-aarch64-xcarchive
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index f156ee2..86ced37 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -12,7 +12,7 @@ jobs:
   labeler:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/labeler@v5
+      - uses: actions/labeler@v6
         with:
           configuration-path: .github/labeler.yml
           sync-labels: true
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index b02b2da..9cba1e9 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -13,7 +13,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@v10
         with:
           days-before-issue-stale: 60
           days-before-issue-close: 7
diff --git a/.github/workflows/website-deploy.yml b/.github/workflows/website-deploy.yml
index 4ebd802..0b2c809 100644
--- a/.github/workflows/website-deploy.yml
+++ b/.github/workflows/website-deploy.yml
@@ -52,12 +52,12 @@ jobs:
       changed: ${{ steps.commit.outputs.changed }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22
 
@@ -87,12 +87,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout (latest, including sync commit)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: main
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22
 
@@ -105,7 +105,7 @@ jobs:
         run: npm run build
 
       - name: Upload Pages artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v5
         with:
           path: website/dist
 
@@ -119,4 +119,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5