diff --git a/.github/actions/build/action.yml b/.github/actions/build/action.yml
index 585754e1..cbd8fde4 100644
--- a/.github/actions/build/action.yml
+++ b/.github/actions/build/action.yml
@@ -66,7 +66,7 @@ runs:
         restore-keys: maven-${{ runner.os }}-
 
     - name: Set up JDK ${{ inputs.java-version }}
-      uses: actions/setup-java@v5
+      uses: actions/setup-java@v6
       with:
         java-version: ${{ inputs.java-version }}
         distribution: 'temurin'
diff --git a/.github/actions/test-natives/action.yml b/.github/actions/test-natives/action.yml
index 4ae794c9..e4ab563d 100644
--- a/.github/actions/test-natives/action.yml
+++ b/.github/actions/test-natives/action.yml
@@ -66,7 +66,7 @@ runs:
       shell: bash
 
     - name: Set up JDK ${{ inputs.java-version }}
-      uses: actions/setup-java@v5
+      uses: actions/setup-java@v6
       with:
         java-version: ${{ inputs.java-version }}
         distribution: ${{ inputs.java-distribution }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c9c1c95f..51268b7b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -54,7 +54,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Maven cache
         uses: actions/cache@v6
@@ -66,7 +66,7 @@ jobs:
           restore-keys: maven-publish-
 
       - name: Set up JDK 17
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v6
         with:
           java-version: '17'
           distribution: 'temurin'
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index efb5db32..294b0f14 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -29,10 +29,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Node
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: npm
diff --git a/.github/workflows/platforms.yml b/.github/workflows/platforms.yml
index ecf44bdc..1da41415 100644
--- a/.github/workflows/platforms.yml
+++ b/.github/workflows/platforms.yml
@@ -60,7 +60,7 @@ jobs:
     runs-on: ${{ matrix.platform.runs-on }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
           # The media module builds FFmpeg from its third-party submodule.
@@ -137,7 +137,7 @@ jobs:
     runs-on: ${{ matrix.platform.runs-on }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6a7237b2..a8c06e18 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -38,7 +38,7 @@ jobs:
     steps:
       # The full history, for git-cliff.
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: main
           fetch-depth: 0
@@ -102,7 +102,7 @@ jobs:
           git commit -m "chore(release): Update CHANGELOG.md for $RELEASE_TAG"
 
       - name: Set up Java
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v6
         with:
           java-version: '17'
           distribution: 'temurin'
@@ -167,7 +167,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ !inputs.dryRun && needs.prepare-release.outputs.release_tag || '' }}
 
@@ -181,7 +181,7 @@ jobs:
           restore-keys: maven-publish-
 
       - name: Set up JDK 17
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v6
         with:
           java-version: '17'
           distribution: 'temurin'
@@ -265,7 +265,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       # The notes are commit subjects, so they go through the environment and a file
       # rather than into the script, where a quote or a backtick would be run.