diff --git a/.github/workflows/infisical-secrets-check.yml b/.github/workflows/infisical-secrets-check.yml
index 5bf68cf8..318209e2 100644
--- a/.github/workflows/infisical-secrets-check.yml
+++ b/.github/workflows/infisical-secrets-check.yml
@@ -23,4 +23,4 @@ jobs:
           fetch-depth: 0
 
       - name: Infisical secrets check
-        uses: guibranco/github-infisical-secrets-check-action@v5.1.0
+        uses: guibranco/github-infisical-secrets-check-action@v5.1.1
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f3eb30e5..e457878f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -45,32 +45,32 @@ jobs:
     steps:
       # ── Checkout ─────────────────────────────────────────────────────────────
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           token: ${{ secrets.GITHUB_TOKEN }}
 
       # ── Toolchain ────────────────────────────────────────────────────────────
       - name: Setup .NET 10
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: "10.0.x"
 
       - name: Setup Java 21
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: "21"
 
       # ── GitVersion ───────────────────────────────────────────────────────────
       - name: Install GitVersion
-        uses: gittools/actions/gitversion/setup@v3
+        uses: gittools/actions/gitversion/setup@v4
         with:
           versionSpec: "6.x"
 
       - name: Determine version
         id: gitversion
-        uses: gittools/actions/gitversion/execute@v3
+        uses: gittools/actions/gitversion/execute@v4
 
       - name: Patch .props files with computed version
         run: |
@@ -137,7 +137,7 @@ jobs:
           done
 
       - name: Publish test results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: always()
         with:
           name: test-results-${{ github.run_id }}
@@ -145,7 +145,7 @@ jobs:
 
       # ── Coverage reporting ────────────────────────────────────────────────────
       - name: Report coverage → Codecov
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v6
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: Tests/${{ steps.solution.outputs.name }}.Tests/coverage.net9.0.opencover.xml
@@ -262,7 +262,7 @@ jobs:
 
       # ── Create GitHub Release ─────────────────────────────────────────────────
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           tag_name: v${{ steps.gitversion.outputs.semVer }}
           name: Release of ${{ steps.solution.outputs.name }} – v${{ steps.gitversion.outputs.semVer }}