diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
index 4ecab8c84..85a15bf0e 100644
--- a/.devcontainer/Dockerfile
+++ b/.devcontainer/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22-alpine3.21
+FROM node:24-alpine3.22
 
 RUN apk add --no-cache \
     git \
diff --git a/.github/workflows/calibreapp-image-actions.yml b/.github/workflows/calibreapp-image-actions.yml
index 109cb276c..43313b8a3 100644
--- a/.github/workflows/calibreapp-image-actions.yml
+++ b/.github/workflows/calibreapp-image-actions.yml
@@ -21,6 +21,6 @@ jobs:
           persist-credentials: false
 
       - name: Compress Images
-        uses: calibreapp/image-actions@1.1.0 # TODO: if they start using a tag like v1, switch to that
+        uses: calibreapp/image-actions@1.4.1 # TODO: if they start using a tag like v1, switch to that
         with:
-          githubToken: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 55b9ba3b4..597911296 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,8 +10,8 @@ on:
 
 env:
   FORCE_COLOR: 2
-  NODE: 22
-  PYTHON_VERSION: "3.11"
+  NODE: 24
+  PYTHON_VERSION: "3.14"
 
 jobs:
   test:
@@ -24,14 +24,14 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Python
-        uses: actions/setup-python@v5.6.0
+        uses: actions/setup-python@v6.0.0
         with:
           python-version: "${{ env.PYTHON_VERSION }}"
           architecture: "x64"
           cache: pip
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4.4.0
+        uses: actions/setup-node@v5.0.0
         with:
           node-version: "${{ env.NODE }}"
           cache: npm
diff --git a/.github/workflows/stale_pr.yml b/.github/workflows/stale_pr.yml
index b9f23df5a..4f6393e85 100644
--- a/.github/workflows/stale_pr.yml
+++ b/.github/workflows/stale_pr.yml
@@ -16,7 +16,7 @@ jobs:
       pull-requests: write
 
     steps:
-      - uses: actions/stale@v9.1.0
+      - uses: actions/stale@v10.1.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           # Do not automatically mark PR/issue as stale
diff --git a/netlify.toml b/netlify.toml
index f2dc63f05..48742a5aa 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -4,8 +4,8 @@ publish = "site/"
 command = "mkdocs build --clean --strict"
 
 [build.environment]
-    PYTHON_VERSION = "3.11"
-    NODE_VERSION = "22"
+    PYTHON_VERSION = "3.14"
+    NODE_VERSION = "24"
     CI = "true"
     DISABLE_OPENCOLLECTIVE = "true"
     OPENCOLLECTIVE_HIDE = "true"