diff --git a/.github/workflows/perf-reliability-regression.yml b/.github/workflows/perf-reliability-regression.yml
index 3999e81..bd3a6ba 100644
--- a/.github/workflows/perf-reliability-regression.yml
+++ b/.github/workflows/perf-reliability-regression.yml
@@ -21,13 +21,13 @@ jobs:
       PERF_LANE: ${{ github.event_name == 'schedule' && github.event.schedule == '0 7 * * 0' && 'weekly' || github.event_name == 'schedule' && 'nightly' || 'pr' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 24
           cache: pnpm
@@ -86,7 +86,7 @@ jobs:
           LANE: ${{ env.PERF_LANE }}
 
       - name: Upload perf report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: perf-gate-report-${{ env.PERF_LANE }}
           path: |
diff --git a/.github/workflows/release-extension-public.yml b/.github/workflows/release-extension-public.yml
index 8598fb9..0080049 100644
--- a/.github/workflows/release-extension-public.yml
+++ b/.github/workflows/release-extension-public.yml
@@ -39,13 +39,13 @@ jobs:
       CWS_EXTENSION_ID: ${{ secrets.CWS_EXTENSION_ID }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 24
           cache: pnpm
@@ -106,7 +106,7 @@ jobs:
           fi
 
       - name: Upload extension public artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: extension-public-${{ inputs.version }}-${{ inputs.stage }}
           path: dist/releases/chrome-store-public/${{ inputs.version }}
\ No newline at end of file
diff --git a/.github/workflows/release-extension-stage-controller.yml b/.github/workflows/release-extension-stage-controller.yml
index c76d5a2..b23032f 100644
--- a/.github/workflows/release-extension-stage-controller.yml
+++ b/.github/workflows/release-extension-stage-controller.yml
@@ -37,13 +37,13 @@ jobs:
       RELEASE_DRY_RUN: ${{ github.event_name == 'schedule' && 'true' || inputs.dry_run }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 24
           cache: pnpm
@@ -67,7 +67,7 @@ jobs:
           fi
 
       - name: Upload controller artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: extension-stage-controller-${{ env.RELEASE_VERSION }}-${{ env.RELEASE_STAGE }}
           path: dist/releases/chrome-store-public/${{ env.RELEASE_VERSION }}/controller
\ No newline at end of file
diff --git a/.github/workflows/release-internal-beta.yml b/.github/workflows/release-internal-beta.yml
index 8fe78ad..e97fcf7 100644
--- a/.github/workflows/release-internal-beta.yml
+++ b/.github/workflows/release-internal-beta.yml
@@ -48,13 +48,13 @@ jobs:
       RELEASE_DRY_RUN: ${{ inputs.dry_run }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 24
           cache: pnpm
@@ -72,7 +72,7 @@ jobs:
           fi
 
       - name: Upload desktop artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: internal-beta-${{ inputs.version }}-${{ matrix.platform }}
           path: dist/releases/internal-beta/${{ inputs.version }}/${{ matrix.output_dir }}
@@ -84,13 +84,13 @@ jobs:
       RELEASE_DRY_RUN: ${{ inputs.dry_run }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 24
           cache: pnpm
@@ -111,7 +111,7 @@ jobs:
           fi
 
       - name: Upload extension artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: internal-beta-${{ inputs.version }}-extension
           path: dist/releases/internal-beta/${{ inputs.version }}/extension
@@ -127,28 +127,28 @@ jobs:
       RELEASE_DRY_RUN: ${{ inputs.dry_run }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Download mac artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: internal-beta-${{ inputs.version }}-macos
           path: dist/releases/internal-beta/${{ inputs.version }}/desktop
 
       - name: Download windows artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: internal-beta-${{ inputs.version }}-windows
           path: dist/releases/internal-beta/${{ inputs.version }}/desktop-windows
 
       - name: Download linux artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: internal-beta-${{ inputs.version }}-linux
           path: dist/releases/internal-beta/${{ inputs.version }}/desktop-linux
 
       - name: Download extension artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: internal-beta-${{ inputs.version }}-extension
           path: dist/releases/internal-beta/${{ inputs.version }}/extension
@@ -183,7 +183,7 @@ jobs:
           NODE
 
       - name: Upload combined release artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: internal-beta-${{ inputs.version }}-combined
           path: dist/releases/internal-beta/${{ inputs.version }}
diff --git a/.github/workflows/release-staged-public-prerelease.yml b/.github/workflows/release-staged-public-prerelease.yml
index 152f13c..6377680 100644
--- a/.github/workflows/release-staged-public-prerelease.yml
+++ b/.github/workflows/release-staged-public-prerelease.yml
@@ -38,7 +38,7 @@ jobs:
       UPDATER_SIGNATURE: ${{ secrets.UPDATER_SIGNATURE }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Verify manual smoke evidence
         shell: bash
@@ -53,10 +53,10 @@ jobs:
           fi
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 24
           cache: pnpm
@@ -212,7 +212,7 @@ jobs:
           fi
 
       - name: Upload promotion manifest
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: staged-public-prerelease-${{ inputs.version }}
           path: |