diff --git a/.github/workflows/ci-changes.yml b/.github/workflows/ci-changes.yml
index cf44c32f03..9c9c89f8ac 100644
--- a/.github/workflows/ci-changes.yml
+++ b/.github/workflows/ci-changes.yml
@@ -37,7 +37,7 @@ jobs:
     steps:
 
     - name: Git Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Configure and refresh repositories
       # disable unused repositories to have faster refresh
diff --git a/.github/workflows/ci-devel.yml b/.github/workflows/ci-devel.yml
index 57365fc0de..9fcbf09751 100644
--- a/.github/workflows/ci-devel.yml
+++ b/.github/workflows/ci-devel.yml
@@ -37,7 +37,7 @@ jobs:
     steps:
 
     - name: Git Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       with:
         # checkout only the "devel" subdirectory
         sparse-checkout: |
diff --git a/.github/workflows/ci-doc-check.yml b/.github/workflows/ci-doc-check.yml
index 49acb9ae0f..cc61040bf4 100644
--- a/.github/workflows/ci-doc-check.yml
+++ b/.github/workflows/ci-doc-check.yml
@@ -42,7 +42,7 @@ jobs:
     steps:
 
     - name: Git Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Fix the file owner
       # fix the file owner
@@ -58,7 +58,7 @@ jobs:
            libxslt-devel libxml2-devel xmlstarlet 'rubygem(ruby-augeas)'
 
     - name: Cache RubyGems
-      uses: actions/cache@v3
+      uses: actions/cache@v5
       with:
         key: "Gemfile-${{ hashFiles('service/Gemfile.lock') }}"
         path: service/vendor/bundle
diff --git a/.github/workflows/ci-integration-tests.yml b/.github/workflows/ci-integration-tests.yml
index bb15b03b7e..a56999db4f 100644
--- a/.github/workflows/ci-integration-tests.yml
+++ b/.github/workflows/ci-integration-tests.yml
@@ -24,7 +24,7 @@ jobs:
     # TODO: Cache the Ruby gems and node packages
 
     - name: Git Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       with:
         # fetch complete history with tags, agama.gemspec calls "git describe --tags"
         # that would fail with just last commit checked out
@@ -32,7 +32,7 @@ jobs:
         fetch-tags: true
 
     - name: Checkout integration tests
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       with:
         path: integration-tests
         repository: ${{ github.repository_owner }}/integration-tests
@@ -104,7 +104,7 @@ jobs:
       run:  podman exec agama journalctl
 
     - name: Upload the test results
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       # run even when any previous step fails
       if: always()
       with:
diff --git a/.github/workflows/ci-live.yml b/.github/workflows/ci-live.yml
index 16da2a54f0..c1eab0ef72 100644
--- a/.github/workflows/ci-live.yml
+++ b/.github/workflows/ci-live.yml
@@ -48,7 +48,7 @@ jobs:
     steps:
 
     - name: Git Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Configure and refresh repositories
       # disable unused repositories to have faster refresh
diff --git a/.github/workflows/ci-profile-schema.yml b/.github/workflows/ci-profile-schema.yml
index 2dfcdcb94b..33d092c53e 100644
--- a/.github/workflows/ci-profile-schema.yml
+++ b/.github/workflows/ci-profile-schema.yml
@@ -34,14 +34,14 @@ jobs:
     steps:
 
     - name: Git Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       with:
         # checkout only the directory with the schema
         sparse-checkout: |
           rust/agama-lib/share
 
     - name: Install Node
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v6
       with:
         node-version: 22
         cache: npm
diff --git a/.github/workflows/ci-rubocop.yml b/.github/workflows/ci-rubocop.yml
index e822696b93..06cbeca732 100644
--- a/.github/workflows/ci-rubocop.yml
+++ b/.github/workflows/ci-rubocop.yml
@@ -43,14 +43,14 @@ jobs:
     steps:
 
     - name: Git Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     # cache the locally installed Ruby gems for the next invocation to speed up the run,
     # installing Rubocop from scratch takes about 1 minute, the cache is restored in about 2 seconds
     # https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/caching-dependencies-to-speed-up-workflows#using-the-cache-action
     - name: Rubygem cache
       id:   rubygem-cache
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: |
           ~/.local/share/gem
diff --git a/.github/workflows/ci-rust.yml b/.github/workflows/ci-rust.yml
index e610ac71b0..b320b39549 100644
--- a/.github/workflows/ci-rust.yml
+++ b/.github/workflows/ci-rust.yml
@@ -57,7 +57,7 @@ jobs:
     steps:
 
     - name: Git Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Rust toolchain
       run: |
@@ -100,7 +100,7 @@ jobs:
       run:  git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
     - name: Git Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Install Rust toolchains
       run: rustup toolchain install stable
@@ -111,7 +111,7 @@ jobs:
         cargo --version
 
     - name: Rust cache
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: |
           ~/.cargo
@@ -171,7 +171,7 @@ jobs:
       run:  git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
     - name: Git Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Install Rust toolchains
       run: rustup toolchain install stable
@@ -192,7 +192,7 @@ jobs:
 
     - name: Rust cache
       id: cache-tests
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: |
           ~/.cargo
@@ -271,7 +271,7 @@ jobs:
         rustup
 
     - name: Git Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Install Rust toolchains
       run: rustup toolchain install stable
@@ -285,7 +285,7 @@ jobs:
       run: rpm -qa
 
     - name: Rust cache
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: |
           ~/.cargo
diff --git a/.github/workflows/ci-service.yml b/.github/workflows/ci-service.yml
index c8064858f7..34b6b0bac9 100644
--- a/.github/workflows/ci-service.yml
+++ b/.github/workflows/ci-service.yml
@@ -62,7 +62,7 @@ jobs:
     steps:
 
     - name: Git Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Configure git
       run:  git config --global --add safe.directory "$GITHUB_WORKSPACE"
@@ -115,7 +115,7 @@ jobs:
       run: bundle exec rspec
 
     - name: Upload coverage result
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       with:
         name: coverage_service
         if-no-files-found: error
@@ -136,10 +136,10 @@ jobs:
 
     steps:
     - name: Git Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Download coverage result
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: coverage_service
 
diff --git a/.github/workflows/ci-web.yml b/.github/workflows/ci-web.yml
index a0644a88d8..7c9cb69874 100644
--- a/.github/workflows/ci-web.yml
+++ b/.github/workflows/ci-web.yml
@@ -51,10 +51,10 @@ jobs:
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
 
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ matrix.node-version }}
         cache: 'npm'
diff --git a/.github/workflows/obs-service-shared.yml b/.github/workflows/obs-service-shared.yml
index 20d21c513a..5259059501 100644
--- a/.github/workflows/obs-service-shared.yml
+++ b/.github/workflows/obs-service-shared.yml
@@ -44,7 +44,7 @@ jobs:
 
       - name: Git Checkout (full history)
         if: ${{ github.ref_type != 'tag' }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # fetch all history, we need to find the latest tag and offset for the version number
           fetch-depth: 0
@@ -53,7 +53,7 @@ jobs:
         run:  git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
       - name: Git Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # fetch all history with tags, we need to find the latest version tag
           fetch-depth: 0
diff --git a/.github/workflows/obs-staging-live.yml b/.github/workflows/obs-staging-live.yml
index 19d19fec6e..9de3d0bab4 100644
--- a/.github/workflows/obs-staging-live.yml
+++ b/.github/workflows/obs-staging-live.yml
@@ -33,7 +33,7 @@ jobs:
              findutils git make osc obs-service-format_spec_file
 
       - name: Git Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Configure git
         run:  git config --global --add safe.directory "$GITHUB_WORKSPACE"
diff --git a/.github/workflows/obs-staging-shared.yml b/.github/workflows/obs-staging-shared.yml
index e300d1779c..fe3b282b04 100644
--- a/.github/workflows/obs-staging-shared.yml
+++ b/.github/workflows/obs-staging-shared.yml
@@ -54,7 +54,7 @@ jobs:
              ${{ inputs.install_packages }}
 
       - name: Git Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # fetch all history with tags, we need to find the latest version tag
           fetch-depth: 0
diff --git a/.github/workflows/weblate-merge-po-sle16.yml b/.github/workflows/weblate-merge-po-sle16.yml
index 4505283c7d..341c291a12 100644
--- a/.github/workflows/weblate-merge-po-sle16.yml
+++ b/.github/workflows/weblate-merge-po-sle16.yml
@@ -48,14 +48,14 @@ jobs:
           git config --global user.email "yast-devel@opensuse.org"
 
       - name: Checkout sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama
           # checkout the SLE-16 branch
           ref: SLE-16
 
       - name: Checkout Agama-weblate sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama-weblate
           repository: ${{ github.repository_owner }}/agama-weblate
diff --git a/.github/workflows/weblate-merge-po.yml b/.github/workflows/weblate-merge-po.yml
index 5bfadbdffa..f2b2e252d4 100644
--- a/.github/workflows/weblate-merge-po.yml
+++ b/.github/workflows/weblate-merge-po.yml
@@ -48,12 +48,12 @@ jobs:
           git config --global user.email "yast-devel@opensuse.org"
 
       - name: Checkout sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama
 
       - name: Checkout Agama-weblate sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama-weblate
           repository: ${{ github.repository_owner }}/agama-weblate
diff --git a/.github/workflows/weblate-merge-products-po-sle16.yml b/.github/workflows/weblate-merge-products-po-sle16.yml
index 2f595e4818..e23223ac49 100644
--- a/.github/workflows/weblate-merge-products-po-sle16.yml
+++ b/.github/workflows/weblate-merge-products-po-sle16.yml
@@ -48,14 +48,14 @@ jobs:
           git config --global user.email "yast-devel@opensuse.org"
 
       - name: Checkout sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama
           # checkout the SLE-16 branch
           ref: SLE-16
 
       - name: Checkout Agama-weblate sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama-weblate
           repository: ${{ github.repository_owner }}/agama-weblate
diff --git a/.github/workflows/weblate-merge-products-po.yml b/.github/workflows/weblate-merge-products-po.yml
index 2aabe0274b..09af7a9d29 100644
--- a/.github/workflows/weblate-merge-products-po.yml
+++ b/.github/workflows/weblate-merge-products-po.yml
@@ -48,12 +48,12 @@ jobs:
           git config --global user.email "yast-devel@opensuse.org"
 
       - name: Checkout sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama
 
       - name: Checkout Agama-weblate sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama-weblate
           repository: ${{ github.repository_owner }}/agama-weblate
diff --git a/.github/workflows/weblate-merge-rust-po.yml b/.github/workflows/weblate-merge-rust-po.yml
index c129c69a9f..7958d81eb6 100644
--- a/.github/workflows/weblate-merge-rust-po.yml
+++ b/.github/workflows/weblate-merge-rust-po.yml
@@ -48,12 +48,12 @@ jobs:
           git config --global user.email "yast-devel@opensuse.org"
 
       - name: Checkout sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama
 
       - name: Checkout Agama-weblate sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama-weblate
           repository: ${{ github.repository_owner }}/agama-weblate
diff --git a/.github/workflows/weblate-merge-service-po-sle16.yml b/.github/workflows/weblate-merge-service-po-sle16.yml
index 33245470b4..f644a1b7ad 100644
--- a/.github/workflows/weblate-merge-service-po-sle16.yml
+++ b/.github/workflows/weblate-merge-service-po-sle16.yml
@@ -48,14 +48,14 @@ jobs:
           git config --global user.email "yast-devel@opensuse.org"
 
       - name: Checkout sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama
           # checkout the SLE-16 branch
           ref: SLE-16
 
       - name: Checkout Agama-weblate sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama-weblate
           repository: ${{ github.repository_owner }}/agama-weblate
diff --git a/.github/workflows/weblate-merge-service-po.yml b/.github/workflows/weblate-merge-service-po.yml
index 043d4a446b..9fcaf0a535 100644
--- a/.github/workflows/weblate-merge-service-po.yml
+++ b/.github/workflows/weblate-merge-service-po.yml
@@ -48,12 +48,12 @@ jobs:
           git config --global user.email "yast-devel@opensuse.org"
 
       - name: Checkout sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama
 
       - name: Checkout Agama-weblate sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama-weblate
           repository: ${{ github.repository_owner }}/agama-weblate
diff --git a/.github/workflows/weblate-update-pot.yml b/.github/workflows/weblate-update-pot.yml
index 5727a110ad..65843e4305 100644
--- a/.github/workflows/weblate-update-pot.yml
+++ b/.github/workflows/weblate-update-pot.yml
@@ -63,12 +63,12 @@ jobs:
           zypper --non-interactive install --no-recommends diffutils git gettext-tools npm-default "rubygem(ruby:$RUBY_VERSION:yast-rake)" "rubygem(ruby:$RUBY_VERSION:gettext)" yast2-devtools which
 
       - name: Checkout Agama sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama
 
       - name: Checkout Weblate sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: agama-weblate
           repository: ${{ github.repository_owner }}/agama-weblate