diff --git a/.github/workflows/github-labeler.yml b/.github/workflows/github-labeler.yml
index 2ca01ff..e4b69bd 100644
--- a/.github/workflows/github-labeler.yml
+++ b/.github/workflows/github-labeler.yml
@@ -17,10 +17,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Run Labeler
-        uses: crazy-max/ghaction-github-labeler@v5
+        uses: crazy-max/ghaction-github-labeler@v6
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           yaml-file: .github/labels.yml
diff --git a/.github/workflows/sync-docs.yml b/.github/workflows/sync-docs.yml
index 7916162..55122fe 100644
--- a/.github/workflows/sync-docs.yml
+++ b/.github/workflows/sync-docs.yml
@@ -14,12 +14,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout source repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           path: source-repo
 
       - name: Checkout target repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           repository: opsmill/infrahub-docs
           token: ${{ secrets.GH_INFRAHUB_BOT_TOKEN }}
diff --git a/.github/workflows/trigger-push-stable.yml b/.github/workflows/trigger-push-stable.yml
index fb5ebe8..cff5830 100644
--- a/.github/workflows/trigger-push-stable.yml
+++ b/.github/workflows/trigger-push-stable.yml
@@ -23,7 +23,7 @@ jobs:
       next_version: ${{ steps.version.outputs.next-version }}
       previous_tag: ${{ steps.previoustag.outputs.tag }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           token: ${{ secrets.GH_INFRAHUB_BOT_TOKEN }}
           fetch-depth: 0
@@ -36,7 +36,7 @@ jobs:
 
       - name: Get previous tag
         id: previoustag
-        uses: WyriHaximus/github-action-get-previous-tag@v1
+        uses: WyriHaximus/github-action-get-previous-tag@v2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
@@ -86,13 +86,13 @@ jobs:
       head_sha: ${{ steps.head.outputs.sha }}
       next_version: ${{ steps.expose.outputs.next_version }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           token: ${{ secrets.GH_INFRAHUB_BOT_TOKEN }}
           fetch-depth: 0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v7
         with:
           version: "latest"
 
diff --git a/.github/workflows/workflow-linter.yml b/.github/workflows/workflow-linter.yml
index 900eb4f..80687e1 100644
--- a/.github/workflows/workflow-linter.yml
+++ b/.github/workflows/workflow-linter.yml
@@ -30,9 +30,9 @@ jobs:
       github_workflows: ${{ steps.changes.outputs.github_workflows }}
     steps:
       - name: "Check out repository code"
-        uses: "actions/checkout@v5"
+        uses: "actions/checkout@v7"
       - name: Check for file changes
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@v4
         id: changes
         with:
           token: ${{ github.token }}
@@ -45,7 +45,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: "Check out repository code"
-        uses: "actions/checkout@v5"
+        uses: "actions/checkout@v7"
       - name: "Setup environment"
         run: "pip install yamllint==1.35.1"
       - name: "Linting: yamllint"
@@ -65,10 +65,10 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: "Check out repository code"
-        uses: "actions/checkout@v5"
+        uses: "actions/checkout@v7"
 
       - name: "Install uv"
-        uses: "astral-sh/setup-uv@v4"
+        uses: "astral-sh/setup-uv@v7"
         with:
           version: "latest"
 
@@ -98,14 +98,14 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: "Check out repository code"
-        uses: "actions/checkout@v5"
+        uses: "actions/checkout@v7"
       # The globs below exclude vendored/agentic tooling trees (spec-kit engine,
       # agent source-of-truth, adapters, constitution). Those are managed by
       # spec-kit / the agentic structure, not hand-authored here, so they follow
       # their own formatting conventions. Note: markdownlint-cli2 globs do not
       # support inline "#" comments, so this rationale lives here instead.
       - name: "Linting: markdownlint"
-        uses: DavidAnson/markdownlint-cli2-action@v19
+        uses: DavidAnson/markdownlint-cli2-action@v24
         with:
           config: .markdownlint.yml
           globs: |
@@ -124,7 +124,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: "Check out repository code"
-        uses: "actions/checkout@v5"
+        uses: "actions/checkout@v7"
       - name: Check workflow files
         run: |
           bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
@@ -147,11 +147,11 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: "Check out repository code"
-        uses: "actions/checkout@v5"
+        uses: "actions/checkout@v7"
         with:
           submodules: true
       - name: Install NodeJS
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 20
           cache: 'npm'
@@ -173,7 +173,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: "Check out repository code"
-        uses: "actions/checkout@v5"
+        uses: "actions/checkout@v7"
         with:
           submodules: true
 
diff --git a/.github/workflows/workflow-publish.yml b/.github/workflows/workflow-publish.yml
index 78ce3ee..e867817 100644
--- a/.github/workflows/workflow-publish.yml
+++ b/.github/workflows/workflow-publish.yml
@@ -44,10 +44,10 @@ jobs:
     runs-on: "ubuntu-22.04"
     steps:
       - name: "Check out repository code"
-        uses: "actions/checkout@v5"
+        uses: "actions/checkout@v7"
 
       - name: "Install uv"
-        uses: "astral-sh/setup-uv@v4"
+        uses: "astral-sh/setup-uv@v7"
         with:
           version: "latest"
 
diff --git a/.github/workflows/workflow-release-drafter.yml b/.github/workflows/workflow-release-drafter.yml
index a7a8589..535e617 100644
--- a/.github/workflows/workflow-release-drafter.yml
+++ b/.github/workflows/workflow-release-drafter.yml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           token: ${{ secrets.GH_INFRAHUB_BOT_TOKEN }}
@@ -64,7 +64,7 @@ jobs:
             git push origin "refs/tags/${VERSION}"
           fi
 
-      - uses: release-drafter/release-drafter@v6
+      - uses: release-drafter/release-drafter@v7
         with:
           config-name: release-drafter.yml
           publish: ${{ inputs.publish }}
diff --git a/.github/workflows/workflow-tests.yml b/.github/workflows/workflow-tests.yml
index f3afb3d..c042be6 100644
--- a/.github/workflows/workflow-tests.yml
+++ b/.github/workflows/workflow-tests.yml
@@ -23,9 +23,9 @@ jobs:
       sync: ${{ steps.changes.outputs.sync_all }}
     steps:
       - name: "Check out repository code"
-        uses: "actions/checkout@v5"
+        uses: "actions/checkout@v7"
       - name: Check for file changes
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@v4
         id: changes
         with:
           token: ${{ github.token }}
@@ -46,10 +46,10 @@ jobs:
           - "3.13"
     steps:
       - name: "Check out repository code"
-        uses: "actions/checkout@v5"
+        uses: "actions/checkout@v7"
 
       - name: "Install uv"
-        uses: "astral-sh/setup-uv@v4"
+        uses: "astral-sh/setup-uv@v7"
         with:
           version: "latest"
 
diff --git a/.github/workflows/workflow-uv-check.yml b/.github/workflows/workflow-uv-check.yml
index 0f5ea77..4ad5db4 100644
--- a/.github/workflows/workflow-uv-check.yml
+++ b/.github/workflows/workflow-uv-check.yml
@@ -17,9 +17,9 @@ jobs:
       uv_files: ${{ steps.changes.outputs.uv_files }}
     steps:
       - name: "Check out repository code"
-        uses: "actions/checkout@v5"
+        uses: "actions/checkout@v7"
       - name: Check for file changes
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@v4
         id: changes
         with:
           token: ${{ github.token }}
@@ -35,10 +35,10 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: "Check out repository code"
-        uses: "actions/checkout@v5"
+        uses: "actions/checkout@v7"
 
       - name: "Install uv"
-        uses: "astral-sh/setup-uv@v4"
+        uses: "astral-sh/setup-uv@v7"
         with:
           version: "latest"