diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e8e81c9..de17c3c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,8 +12,8 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v6
         with:
           node-version: 24 # 23+ runs .ts tests without an experimental flag
           cache: npm
@@ -21,7 +21,7 @@ jobs:
       - run: npm run lint
       - run: npm run check
       - run: npm run test:coverage
-      - uses: codecov/codecov-action@v5
+      - uses: codecov/codecov-action@v7
         with:
           files: lcov.info
         env:
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index c1bd428..b0747ce 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -19,8 +19,8 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: withastro/action@v3 # installs deps, builds, uploads the Pages artifact
+      - uses: actions/checkout@v7
+      - uses: withastro/action@v6 # installs deps, builds, uploads the Pages artifact
 
   deploy:
     needs: build
@@ -30,4 +30,4 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
       - id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5
diff --git a/.github/workflows/ingest.yml b/.github/workflows/ingest.yml
index 0529a64..227f2da 100644
--- a/.github/workflows/ingest.yml
+++ b/.github/workflows/ingest.yml
@@ -21,14 +21,14 @@ jobs:
   ingest:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v6
         with:
           node-version: 22
       - run: node scripts/fetch-github-projects.mjs
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - uses: peter-evans/create-pull-request@v6
+      - uses: peter-evans/create-pull-request@v8
         with:
           branch: auto/ingest-showcase
           title: 'chore: draft entries from cml-showcase repos'