diff --git a/.github/workflows/cd-publish-release.yml b/.github/workflows/cd-publish-release.yml
index 59b554f..bee862e 100644
--- a/.github/workflows/cd-publish-release.yml
+++ b/.github/workflows/cd-publish-release.yml
@@ -24,7 +24,7 @@ jobs:
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 
diff --git a/.github/workflows/cd-release-pr.yml b/.github/workflows/cd-release-pr.yml
index d138df7..d963da4 100644
--- a/.github/workflows/cd-release-pr.yml
+++ b/.github/workflows/cd-release-pr.yml
@@ -29,7 +29,7 @@ jobs:
       !contains(github.event.head_commit.message, 'chore: bump version')
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           fetch-depth: 0
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f6585fd..ffdfdde 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -34,7 +34,7 @@ jobs:
       PUBLIC_CONVEX_URL: "https://example.convex.cloud"
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
@@ -42,7 +42,7 @@ jobs:
           bun-version: 1.3.11
 
       - name: Cache Bun + Turbo
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             ~/.bun/install/cache
@@ -81,7 +81,7 @@ jobs:
       PUBLIC_CONVEX_URL: "https://example.convex.cloud"
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
@@ -89,7 +89,7 @@ jobs:
           bun-version: 1.3.11
 
       - name: Cache Bun + Turbo
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             ~/.bun/install/cache
@@ -99,7 +99,7 @@ jobs:
             ${{ runner.os }}-bun-turbo-
 
       - name: Cache Playwright browsers
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.cache/ms-playwright
           key: ${{ runner.os }}-playwright-${{ hashFiles('**/bun.lock', '**/bun.lockb', 'package.json', 'apps/**/package.json', 'packages/**/package.json') }}
@@ -144,7 +144,7 @@ jobs:
       PUBLIC_CONVEX_URL: "https://example.convex.cloud"
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
@@ -152,7 +152,7 @@ jobs:
           bun-version: 1.3.11
 
       - name: Cache Bun + Turbo
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             ~/.bun/install/cache
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 8291b9d..343a513 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
diff --git a/.github/workflows/preview-seed.yml b/.github/workflows/preview-seed.yml
index 728cbbc..5da129e 100644
--- a/.github/workflows/preview-seed.yml
+++ b/.github/workflows/preview-seed.yml
@@ -177,7 +177,7 @@ jobs:
 
       - name: Checkout
         if: steps.pr.outputs.skip != 'true'
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Bun
         if: steps.pr.outputs.skip != 'true'
diff --git a/.github/workflows/tui-release.yml b/.github/workflows/tui-release.yml
index 0b75335..b2cc80b 100644
--- a/.github/workflows/tui-release.yml
+++ b/.github/workflows/tui-release.yml
@@ -28,7 +28,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
@@ -83,7 +83,7 @@ jobs:
       RELEASE_QA_TARGET_URL: ${{ vars.RELEASE_QA_TARGET_URL }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
@@ -91,7 +91,7 @@ jobs:
           bun-version: 1.3.11
 
       - name: Cache Bun + Turbo
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             ~/.bun/install/cache
@@ -101,7 +101,7 @@ jobs:
             ${{ runner.os }}-bun-turbo-
 
       - name: Cache Playwright browsers
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.cache/ms-playwright
           key: ${{ runner.os }}-playwright-${{ hashFiles('**/bun.lock', '**/bun.lockb', 'package.json', 'apps/**/package.json', 'packages/**/package.json') }}