diff --git a/.github/workflows/build-image-main.yml b/.github/workflows/build-image-main.yml
index 041395f..5c26a88 100644
--- a/.github/workflows/build-image-main.yml
+++ b/.github/workflows/build-image-main.yml
@@ -15,18 +15,18 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Set up Docker Buildx for multi-platform builds
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
         with:
           platforms: ${{ vars.PLATFORMS }}
       - name: Log in to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       - name: Build and push Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           platforms: ${{ vars.PLATFORMS }}
           push: true
diff --git a/.github/workflows/build-image-semver.yml b/.github/workflows/build-image-semver.yml
index cda8557..686c076 100644
--- a/.github/workflows/build-image-semver.yml
+++ b/.github/workflows/build-image-semver.yml
@@ -15,24 +15,24 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Set up Docker Buildx for multi-platform builds
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
         with:
           platforms: ${{ vars.PLATFORMS }}
       - name: Log in to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       - name: Derive image tag(s)
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: >-
             ${{ secrets.DOCKERHUB_ORGANIZATION_NAME }}/${{ vars.IMAGE_NAME }}
           tags: type=semver,pattern={{version}}
       - name: Build and push Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           platforms: ${{ vars.PLATFORMS }}
           push: true
diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
index 42991a9..3acaff9 100644
--- a/.github/workflows/documentation.yml
+++ b/.github/workflows/documentation.yml
@@ -20,7 +20,7 @@ jobs:
             echo "release=YES" >> $GITHUB_OUTPUT
             echo "version_string=${{ github.ref_name }}" | sed -r 's/(=)v/\1/' >> $GITHUB_OUTPUT
           fi
-      - uses: PowerDNS/pdns-publish-docs-action@v1.1.0
+      - uses: PowerDNS/pdns-publish-docs-action@v1.1.1
         if: ${{ steps.release_check.outputs.release == 'YES' }} # Only build and push docs for releases
         with:
           aws_access_key_id: ${{ secrets.AWS_ACCESS_KEY_ID }}
diff --git a/.github/workflows/go-build.yml b/.github/workflows/go-build.yml
index 78a0e55..9b25e92 100644
--- a/.github/workflows/go-build.yml
+++ b/.github/workflows/go-build.yml
@@ -18,9 +18,9 @@ jobs:
     runs-on: ubuntu-22.04
     name: Go build (Linux)
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: Set up Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version: '1.24'
         check-latest: true
@@ -28,7 +28,7 @@ jobs:
     - name: Build (amd64)
       run: GOOS=linux GOARCH=amd64 CGO_ENABLED=1 ./build.sh
     - name: Upload binary
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: lightningstream_linux_amd64.bin
         path: bin/lightningstream
@@ -38,9 +38,9 @@ jobs:
     runs-on: macos-15
     name: Go build (macOS)
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: Set up Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version: '1.24'
         check-latest: true
@@ -48,7 +48,7 @@ jobs:
     - name: Build (amd64)
       run: GOOS=darwin GOARCH=amd64 CGO_ENABLED=1 ./build.sh
     - name: Upload binary
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: lightningstream_darwin_amd64.bin
         path: bin/lightningstream
@@ -56,7 +56,7 @@ jobs:
     - name: Build (arm64)
       run: GOOS=darwin GOARCH=arm64 CGO_ENABLED=1 ./build.sh
     - name: Upload binary
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: lightningstream_darwin_arm64.bin
         path: bin/lightningstream
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index ba0b315..c2898ed 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -22,9 +22,9 @@ jobs:
         
     name: Go ${{ matrix.go }} tests
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: Set up Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version: ${{ matrix.go }}
     - name: Build
diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml
index 3b2b9e4..7671bf6 100644
--- a/.github/workflows/spelling.yml
+++ b/.github/workflows/spelling.yml
@@ -92,7 +92,7 @@ jobs:
     steps:
     - name: check-spelling
       id: spelling
-      uses: check-spelling/check-spelling@v0.0.24
+      uses: check-spelling/check-spelling@v0.0.25
       with:
         suppress_push_for_open_pull_request: 1
         checkout: true