diff --git a/.github/workflows/check-markdown-links.yml b/.github/workflows/check-markdown-links.yml
index 3d69f5cfa..998ee45b0 100644
--- a/.github/workflows/check-markdown-links.yml
+++ b/.github/workflows/check-markdown-links.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Link Checker
         id: lychee
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9c14e2715..0aa843165 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -44,7 +44,7 @@ jobs:
       fail-fast: false
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           # in a pull_request_target event, the ref is the `main` branch not the PR branch
           # so we need to tell checkout to use the head.ref instead.
@@ -53,7 +53,7 @@ jobs:
       - uses: taiki-e/install-action@just
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.10"
 
@@ -129,7 +129,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           # in a pull_request_target event, the ref is the `main` branch not the PR branch
           # so we need to tell checkout to use the head.ref instead.
@@ -148,14 +148,14 @@ jobs:
       - uses: taiki-e/install-action@just
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v7
         with:
           version: "0.7.10"
           enable-cache: true
           cache-dependency-glob: "./projects/pgai/uv.lock"
 
       - name: "Set up Python"
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version-file: "./projects/pgai/.python-version"
 
@@ -169,7 +169,7 @@ jobs:
     needs: authorize
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           # in a pull_request_target event, the ref is the `main` branch not the PR branch
           # so we need to tell checkout to use the head.ref instead.
@@ -196,7 +196,7 @@ jobs:
       - name: Delete huge unnecessary tools folder
         run: rm -rf /opt/hostedtoolcache
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           # in a pull_request_target event, the ref is the `main` branch not the PR branch
           # so we need to tell checkout to use the head.ref instead.
@@ -205,14 +205,14 @@ jobs:
       - uses: taiki-e/install-action@just
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v7
         with:
           version: "0.7.10"
           enable-cache: true
           cache-dependency-glob: "./projects/pgai/uv.lock"
 
       - name: "Set up Python"
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version-file: "./projects/pgai/.python-version"
 
@@ -236,14 +236,14 @@ jobs:
       fail-fast: true
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           # in a pull_request_target event, the ref is the `main` branch not the PR branch
           # so we need to tell checkout to use the head.ref instead.
           ref: ${{ github.event.pull_request.head.sha || github.ref }}
 
       - name: "Set up Python"
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 
diff --git a/.github/workflows/commit-lint.yml b/.github/workflows/commit-lint.yml
index ff7c2fcf3..d6d13c247 100644
--- a/.github/workflows/commit-lint.yml
+++ b/.github/workflows/commit-lint.yml
@@ -9,7 +9,7 @@ jobs:
   commitlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - uses: wagoid/commitlint-github-action@v6
diff --git a/.github/workflows/huggingface-dataset.yml b/.github/workflows/huggingface-dataset.yml
index 0c7d825c3..0b67b531a 100644
--- a/.github/workflows/huggingface-dataset.yml
+++ b/.github/workflows/huggingface-dataset.yml
@@ -18,10 +18,10 @@ jobs:
     name: Publish dataset to huggingface hub
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
     
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v7
         with:
           version: "0.7.10"
           enable-cache: true
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 2503256d7..49167f5ec 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -28,17 +28,17 @@ jobs:
     if: needs.release-please.outputs.pgai_release_created
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v7
         with:
           version: "0.7.10"
           enable-cache: true
           cache-dependency-glob: "./projects/pgai/uv.lock"
 
       - name: "Set up Python"
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version-file: "./projects/pgai/.python-version"